org.jenkins-ci.plugins:pipeline-maven
Maven6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.jenkins-ci.plugins:pipeline-mavenpage 1 of 1
- CVE-2019-10327HIGHCVSS 8.1EG 8.1✓ Fixed in 3.7.12019-05-31
vulnerable: 0.1-beta ... 3.7.0-beta-1 (125 versions)
An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary directory's content on the agent running the Maven build to have Jenkins parse a mali…
- CVE-2020-2233MEDIUMCVSS 6.5EG 6.5✓ Fixed in 3.8.32020-08-12
vulnerable: 0.1-beta ... 3.8.2 (129 versions)
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
- CVE-2020-2234MEDIUMCVSS 6.5EG 6.5✓ Fixed in 3.8.32020-08-12
vulnerable: 0.1-beta ... 3.8.2 (129 versions)
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another …
- CVE-2020-2235MEDIUMCVSS 6.5EG 6.5✓ Fixed in 3.8.32020-08-12
vulnerable: 0.1-beta ... 3.8.2 (129 versions)
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through anothe…
- CVE-2020-2256MEDIUMCVSS 5.4EG 5.4✓ Fixed in 3.9.32020-09-16
vulnerable: 0.1-beta ... 3.9.2 (134 versions)
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Co…
- CVE-2023-41934MEDIUMCVSS 5.3EG 5.3✓ Fixed in 1331.v003efa_fd6e812023-09-06
vulnerable: 0.1-beta ... 3.9.3 (158 versions)
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret"…
Check whether org.jenkins-ci.plugins:pipeline-maven is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.jenkins-ci.plugins:pipeline-maven CVEs against the assets you own.
Start Free Scan →