Jenkins Convert To Pipeline — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Convert To Pipeline, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-28677 — CVSS 9.8 (critical): Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build…
• CVE-2023-28676 — CVSS 8.8 (high): A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a…