Package · Maven

org.jenkins-ci.plugins:themis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2025-64137

Jenkins Themis Plugin is missing a permission check

A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

Jenkins Project Jenkins Themis Plugin org.jenkins-ci.plugins:themis Web / CMS Maven

Oct 29, 2025
Medium 4.3

CVE-2025-64136

Jenkins Themis Plugin vulnerable to cross-site request forgery

A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server.

Jenkins Project Jenkins Themis Plugin org.jenkins-ci.plugins:themis Web / CMS Maven

Oct 29, 2025