Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.main/jenkins-core@1.513
purl pkg:maven/org.jenkins-ci.main/jenkins-core@1.513
Next non-vulnerable version 1.514
Latest non-vulnerable version 2.555
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-rrwv-dzq7-9ybd
Aliases:
CVE-2013-2034
GHSA-fg4r-f9j2-36mw
Jenkins Cross-Site Request Forgery vulnerabilities Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors.
1.514
Affected by 0 other vulnerabilities.
VCID-z46p-c93u-auav
Aliases:
CVE-2013-2033
GHSA-826f-32qm-vm3j
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2013-2033 Jenkins: Build Description XSS
1.514
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:33.923323+00:00 GHSA Importer Affected by VCID-rrwv-dzq7-9ybd https://github.com/advisories/GHSA-fg4r-f9j2-36mw 38.1.0
2026-04-04T14:30:36.598314+00:00 GHSA Importer Affected by VCID-z46p-c93u-auav https://github.com/advisories/GHSA-826f-32qm-vm3j 38.1.0
2026-04-03T21:26:07.113448+00:00 GitLab Importer Affected by VCID-rrwv-dzq7-9ybd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.main/jenkins-core/CVE-2013-2034.yml 38.1.0
2026-04-01T12:50:29.546553+00:00 GitLab Importer Affected by VCID-z46p-c93u-auav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.main/jenkins-core/CVE-2013-2033.yml 38.0.0