- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 9
- Registry
- Maven Central
Advisories 9
- CVE-2023-40339Unrated
Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in…
Affected: fixed in 953.v0432a.
- CVE-2021-21645Unrated
Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with…
Affected: fixed in 3.7.1.
- CVE-2021-21644Unrated
A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete…
Affected: fixed in 3.7.1.
- CVE-2021-21643Unrated
Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing…
Affected: fixed in 3.7.1.
- CVE-2021-21642Unrated
Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected: fixed in 3.7.1.
- CVE-2019-1003014Unrated
An cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.4.1 and earlier in…
Affected: fixed in 3.5.
- CVE-2018-1000414Unrated
A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java…
Affected: fixed in 3.2.
- CVE-2018-1000413Unrated
A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly…
Affected: fixed in 3.2.
- CVE-2017-1000104Unrated
The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords.
Affected: fixed in 2.16.2.