CVE Intelligence

Jenkins Project Jenkins Themis Plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Project Jenkins Themis Plugin: 2 record(s), with affected versions and fixes.

CVE-2025-64137 Medium · 4.3 CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Themis
A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.
CVE-2025-64136 Medium · 4.3 CWE-352 Oct 29, 2025
Cross-Site Request Forgery (CSRF) in Jenkins Themis
A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server.