org.csanchez.jenkins.plugins:kubernetes (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.csanchez.jenkins.plugins:kubernetes, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2018-1999040 — CVSS 8.8 (high): An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that…
• CVE-2023-30513 — CVSS 7.5 (high): Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log…
• CVE-2018-1000187 — CVSS 6.5 (medium): A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that…
• CVE-2020-2307 — CVSS 4.3 (medium): Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment…
• CVE-2020-2308 — CVSS 4.3 (medium): A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod…
• CVE-2020-2309 — CVSS 4.3 (medium): A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to…