Jenkins Themis vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Themis: 2 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:themis

CVE-2025-64137 Medium · 4.3 CWE-862 Oct 29, 2025

Missing Authorization in Jenkins Themis

A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

CVE-2025-64136 Medium · 4.3 CWE-352 Oct 29, 2025

Cross-Site Request Forgery (CSRF) in Jenkins Themis

A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server.