- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 1 medium
- Registry
- Maven Central
Advisories 8
- CVE-2026-57287Medium 4.3
Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying…
Affected: fixed in 1367.
- CVE-2023-41933Unrated
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity…
Affected: fixed in 1229.v3039470161a_d.
- CVE-2023-41932Unrated
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple…
Affected: fixed in 1229.v3039470161a_d.
- CVE-2023-41931Unrated
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from…
Affected: fixed in 1229.v3039470161a_d.
- CVE-2023-41930Unrated
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a…
Affected: fixed in 1229.v3039470161a_d.
- CVE-2022-38664Unrated
Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History…
Affected: fixed in 1166.vc9f255f45b.
- CVE-2022-36887Unrated
A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows…
Affected: fixed in 1156.v536a_97b_8d649.
- CVE-2018-1000416Unrated
A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows…
Affected: fixed in 2.18.1.