Jenkins Project Jenkins Ec2 Fleet Plugin vulnerabilities
2 known vulnerabilities affecting jenkins_project/jenkins_ec2_fleet_plugin.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-57294P4MEDIUMCVSS 5.4≤ 4.2.3.539.v8fedff2a_81c32026-06-24
CVE-2026-57294 [MEDIUM] CWE-862 CVE-2026-57294: A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows a
A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.
nvd
CVE-2026-57295P4MEDIUMCVSS 5.4≤ 4.2.3.539.v8fedff2a_81c32026-06-24
CVE-2026-57295 [MEDIUM] CWE-352 CVE-2026-57295: A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81
A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.
nvd