Jenkins Jira Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-11-29. Vendor: Jenkins Project.

CVEs of Jenkins Jira Plugin

• CVE-2023-49653 - CVSS 6.5 (medium), 2023-11-29: Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access…
• CVE-2022-29041 - CVSS 5.4 (medium), 2022-04-12: Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views…
• CVE-2019-16541 - CVSS 9.9 (critical), 2019-11-21: Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use…