Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:job-import-plugin

5 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 medium
Registry
Maven Central

Advisories 5

  • CVE-2026-48926Medium 4.3

    Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with…

    Affected: fixed in 143.145.v48f9a.

  • CVE-2022-43413Medium 4.3

    Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read…

    Affected: fixed in 3.6.

  • A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to…

    Affected: fixed in 3.1.

  • An exposure of sensitive information vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in…

    Affected: fixed in 3.0.

  • An XML external entity processing vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in…

    Affected: fixed in 3.0.