Maven package

org.jenkins-ci.plugins/windocks-start-container

pkg:maven/org.jenkins-ci.plugins/windocks-start-container

Vulnerabilities (2)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2025-64139	Med	4.3		<= 1.4	—	Oct 29, 2025	A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2025-64138	Med	4.3		<= 1.4	—	Oct 29, 2025	A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.

CVE-2025-64139MedOct 29, 2025
affected <= 1.4
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2025-64138MedOct 29, 2025
affected <= 1.4
A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.