Jenkins Global-build-stats Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-09-03. Vendor: Jenkins Project.

CVEs of Jenkins Global-build-stats Plugin

• CVE-2025-58459 - CVSS 4.3 (medium), 2025-09-03: Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with…
• CVE-2022-27207 - CVSS 4.8 (medium), 2022-03-15: Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page, resulting in a…