⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2025-64142

MEDIUM · 4.3 CVSS Gepubliceerd: 29-10-2025 CWE-862

Beschrijving

A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Vendors

Jenkins

Affected products

Nexus Task Runner

References

www.jenkins.io
www.openwall.com