Skip to content
Sign in

Known vulnerabilities in Jenkins Code Dx Plugin

Is your version affected?

CVE list

CVE Summary Score Published
CVE-2023-2631 A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission… 4.3 Medium May 16, 2023
CVE-2023-2195 A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to… 4.3 Medium May 16, 2023
CVE-2023-2633 Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form,… 4.3 Medium May 16, 2023
CVE-2023-2632 Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the… 4.3 Medium May 16, 2023
CVE-2023-2196 A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to… 4.3 Medium May 16, 2023

Other Jenkins products

jenkins 7 cas 2 script_security 2 testlink 1 blazemeter_plugin 1 subversion_partial_release_manager 1 shared_library_version_override 1 openshift-sync-plugin 1 openid 1 mattermost 1 jenkins-telegram-bot 1 jenkins-ssh-slaves-plugin 1