Package · Maven

io.jenkins.plugins:simple-queue

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 4.3

CVE-2025-31723

Jenkins Simple Queue Plugin Cross-Site Request Forgery (CSRF)

A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.

Jenkins Project Jenkins Simple Queue Plugin io.jenkins.plugins:simple-queue Web / CMS Maven

Apr 2, 2025
High 8.0

CVE-2024-54003 EPSS 81%

Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerability

Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Create permission.

Jenkins Project Jenkins Simple Queue Plugin io.jenkins.plugins:simple-queue Web / CMS Maven

Nov 27, 2024