CVE-2019-1003017: Jenkins Job Import

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration.

Affected products

• Jenkins Job Import: up to and including 3.0

Published 2019-02-06. Last modified 2026-06-17.