← Back

Maven Artifact Choicelistprovider (nexus)

maven_artifact_choicelistprovider_(nexus)

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-40347
1Jenkins
1Maven Artifact Choicelistprovider (nexus)
Jun 17, 2026
Aug 16, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials t...Show more
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.Show less
CVE-2018-1999030
1Jenkins
1Maven Artifact Choicelistprovider (nexus)
Nov 21, 2024
Aug 1, 2018
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceLis...Show more
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.Show less