Jenkins Matrix Authorization Strategy Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-29. Vendor: Jenkins Project.

CVEs of Jenkins Matrix Authorization Strategy Plugin

• CVE-2026-42521 - CVSS 6.5 (medium), 2026-04-29: Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in…
• CVE-2021-21623 - CVSS 6.5 (medium), 2021-03-18: An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to…
• CVE-2020-2226 - CVSS 5.4 (medium), 2020-07-15: Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site…