Jenkins Nexus Task Runner vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Nexus Task Runner: 2 record(s), with affected versions and fixes.cpe:2.3:a:jenkins:nexus_task_runner
CVE-2025-64142
Medium · 4.3
CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Nexus Task Runner
A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2025-64141
Medium · 4.3
CWE-352 Oct 29, 2025
Cross-Site Request Forgery (CSRF) in Jenkins Nexus Task Runner
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.