Package · Maven

org.jenkins-ci.plugins:windocks-start-container

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 4.3

CVE-2025-64139

Jenkins Start Windocks Containers Plugin is missing a permission check

A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Jenkins Project Jenkins Start Windocks Containers Plugin org.jenkins-ci.plugins:windocks-start-container Web / CMS Maven

Oct 29, 2025
Medium 4.3

CVE-2025-64138

Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery

A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins Start Windocks Containers Plugin org.jenkins-ci.plugins:windocks-start-container Web / CMS Maven

Oct 29, 2025