Jenkins Start Windocks Container vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Start Windocks Container: 2 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:start_windocks_container

CVE-2025-64139 Medium · 4.3 CWE-862 Oct 29, 2025

Missing Authorization in Jenkins Start Windocks Container

A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVE-2025-64138 Medium · 4.3 CWE-352 Oct 29, 2025

Cross-Site Request Forgery (CSRF) in Jenkins Start Windocks Container

A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.