Jenkins Project Jenkins XebiaLabs XL Deploy Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins XebiaLabs XL Deploy Plugin: 1 record(s), with affected versions and fixes.
CVE-2026-84674
Medium · 5.4
CWE-862 Sep 2, 2026
Missing Authorization in Jenkins Project Jenkins XebiaLabs XL Deploy Plugin
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.