Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-45394 EUVD-2022-7371GHSA-j874-47xx-9xfg

Missing permission check in Jenkins Delete log Plugin

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Delete log Plugin Package: org.jenkins-ci.plugins:delete-log-plugin Category: Web / CMS Ecosystem: Maven

Description

A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to delete build logs.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Delete log Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:delete-log-plugin <= 1.0 — GHSA-j874-47xx-9xfg

Advisories 1

References