Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Jenkins Subscribe
Filtered by product Job Configuration History
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38664 1 Jenkins 1 Job Configuration History 2022-08-25 N/A 5.4 MEDIUM
Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure job names.
CVE-2022-36887 1 Jenkins 1 Job Configuration History 2022-08-03 N/A 4.3 MEDIUM
A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and system configurations.