Jenkins Maven Artifact Choicelistprovider \(Nexus\) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Maven Artifact Choicelistprovider \(Nexus\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-1999030jenkinsmaven_artifact_choicelistprovider_\(nexus\)+1
EPSS score
0.68%
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.6.5CVE-2023-40347jenkins projectjenkins maven artifact choicelistprovider (nexus) plugin+2
EPSS score
0.67%
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.