Login Request a demo
CD
Product
Code DX
by Jenkins · last CVE May 16, 2023
5
CVEs
0
On KEV
4.3
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 1
Severity
All severities5Critical0High0Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Code DX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2631
4.3
0%
May 16
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL
Affected: through 3.1.0
CVE-2023-2633
4.3
0%
May 16
Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture…
Affected: through 3.1.0
CVE-2023-2632
4.3
1%
May 16
Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…
Affected: through 3.1.0
CVE-2023-2196
4.3
1%
May 16
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on…
Affected: through 3.1.0
CVE-2023-2195
3.5
0%
May 16
A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL
Affected: through 3.1.0
Showing 5