org.jenkins-ci.plugins:parameterized-trigger

Maven2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.jenkins-ci.plugins:parameterized-triggerpage 1 of 1

CVE-2017-1000084MEDIUMCVSS 6.5EG 6.5✓ Fixed in 2.35.1
2017-10-05
vulnerable: 2.10 ... 2.9 (31 versions)
Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
CVE-2022-27195MEDIUMCVSS 5.5EG 5.5✓ Fixed in 2.43.1
2022-03-15
vulnerable: 2.10 ... 2.9 (43 versions)
Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their `build.xml` files. These values are s…

Check whether org.jenkins-ci.plugins:parameterized-trigger is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.jenkins-ci.plugins:parameterized-trigger CVEs against the assets you own.

Start Free Scan →