Jenkins Project Jenkins Update-Center2
2 CVEs affecting Jenkins Project Jenkins Update-Center2. Latest disclosed: 2026-09-02. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27905 | Critical | 9.6 | 2023-03-10 | Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross… |
CVE-2026-84677 | Medium | 5.4 | 2026-09-02 | Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugin download index pa… |