Jenkins Project Jenkins Start Windocks Containers Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Start Windocks Containers Plugin: 2 record(s), with affected versions and fixes.
CVE-2025-64139
Medium · 4.3
CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Start Windocks Container
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2025-64138
Medium · 4.3
CWE-352 Oct 29, 2025
Cross-Site Request Forgery (CSRF) in Jenkins Start Windocks Container
A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.