Jenkins Reverse Proxy Auth — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Reverse Proxy Auth, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-32987 — CVSS 8.8 (high): A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an…
• CVE-2022-45384 — CVSS 6.5 (medium): Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the…
• CVE-2018-1000150 — CVSS 3.3 (low): An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#au…