Package · Maven

org.jenkins-ci.plugins:nexus-task-runner

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2025-64142

Jenkins Nexus Task Runner Plugin is missing a permission check

A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Jenkins Project Jenkins Nexus Task Runner Plugin org.jenkins-ci.plugins:nexus-task-runner Web / CMS Maven

Oct 29, 2025
Medium 4.3

CVE-2025-64141

Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

Jenkins Project Jenkins Nexus Task Runner Plugin org.jenkins-ci.plugins:nexus-task-runner Web / CMS Maven

Oct 29, 2025