Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-2320 EUVD-2022-4526GHSA-m8r4-c7jm-w782

Jenkins Plugin Installation Manager Tool did not verify plugin downloads

Published Dec 3, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Plugin Installation Manager Tool Package: io.jenkins.plugin-management:plugin-management-parent-pom Category: Web / CMS Ecosystem: Maven

Description

Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Plugin Installation Manager Tool unspecified – ≤ 2.1.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.jenkins.plugin-management:plugin-management-parent-pom < 2.2.0 2.2.0 GHSA-m8r4-c7jm-w782

References