Maven org.jenkins-ci.plugins:config-file-provider

Name: Maven org.jenkins-ci.plugins:config-file-provider
Brand: Maven

productUS

pkg:maven/org.jenkins-ci.plugins/config-file-provider

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

critical

by severity

0critical3high6medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-21642US	high8.1	37.8% (99th)	—	3.7.1	2021-04-21	< 3.7.1
CVE-2021-21643US	medium6.5OT elevated	1.08% (65th)	—	3.7.1	2021-04-21	< 3.7.1
CVE-2021-21644US	medium5.4	1.05% (64th)	—	3.7.1	2021-04-21	< 3.7.1
CVE-2018-1000413US	medium5.4	0.95% (61st)	—	3.2	2019-01-09	< 3.2
CVE-2021-21645US	medium4.3OT elevated	0.89% (59th)	—	3.7.1	2021-04-21	< 3.7.1
CVE-2019-1003014US	medium4.8	0.88% (59th)	—	3.5	2019-02-06	< 3.5
CVE-2018-1000414US	high8.1	0.83% (58th)	—	3.2	2019-01-09	< 3.2
CVE-2017-1000104US	medium6.5	0.82% (57th)	—	2.16.2	2017-10-05	< 2.16.2
CVE-2023-40339US	high7.5	0.78% (56th)	—	953.v0432a	2023-08-16	< 953.v0432a

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-862Missing Authorization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.