GitHub Advisoryadvisory · Maven

GHSA-2q8v-439j-6p77 Jenkins Exclusion Plugin allows Access to Resource Locks

MEDIUM Published 2022-05-17 Modified 2025-03-13 Official page ↗
Aliases
CVE-2013-6373
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:exclusion
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses
CWE-284
Reviewed
2025-03-13

Affected packages

• Maven org.jenkins-ci.plugins:exclusion: < 0.9 → fixed in 0.9

Description

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-6373 The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References