CVE-2019-10363: Jenkins Configuration As Code

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.

Affected products

• Jenkins Configuration As Code: up to and including 1.24

Published 2019-07-31. Last modified 2026-06-17.