← Back

Lockable Resources

lockable_resources

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-2281
1Jenkins
1Lockable Resources
Jun 17, 2026
Sep 23, 2020
N/A· v4
5.4 MEDIUM· v3
5.8 MEDIUM· v2
A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.
CVE-2019-1003042
1Jenkins
1Lockable Resources
Jun 17, 2026
Mar 28, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.