Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Multijob Plugin — Jenkins Security Advisory 2026-08-05 Clear all filters
TI-2026-49207 CVE-2026-70432 · GHSA-2hx5-662f-6q6f

Cross-site request forgery in Jenkins Multijob Plugin

Priority MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00297 Published 2026-08-05 No fix listed CWE-352
TI-2026-49206 CVE-2026-70431 · GHSA-vxm7-6w3j-gm87

Code injection in Jenkins Multijob Plugin

Priority MEDIUM 41

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute ar…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00638 Published 2026-08-05 No fix listed CWE-94