Simple Queue (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2025-04-02. Vendor: Jenkins.

CVEs of Simple Queue

• CVE-2025-31723 - CVSS 4.3 (medium), 2025-04-02: A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.
• CVE-2024-54003 - CVSS 8 (high), 2024-11-27: Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…