Jira (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 91 known versions, newest CVE from 2023-11-29. Vendor: Jenkins.

CVEs of Jira

• CVE-2023-49653 - CVSS 6.5 (medium), 2023-11-29: Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access…
• CVE-2023-49673 - CVSS 8.8 (high), 2023-11-29: A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an…
• CVE-2022-29041 - CVSS 5.4 (medium), 2022-04-12: Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views…
• CVE-2019-16541 - CVSS 9.9 (critical), 2019-11-21: Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use…
• CVE-2018-1000412 - CVSS 8.8 (high), 2019-01-09: An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to…