Jenkins Project Jenkins Nexus Task Runner Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Nexus Task Runner Plugin: 2 record(s), with affected versions and fixes.
CVE-2025-64142
Medium · 4.3
CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Nexus Task Runner
A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2025-64141
Medium · 4.3
CWE-352 Oct 29, 2025
Cross-Site Request Forgery (CSRF) in Jenkins Nexus Task Runner
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.