Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-64141

CVE-2025-64141: Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery

4.3

CVSS Score
3.1

Basic Information

CVE ID
CVE-2025-64141
GHSA ID
GHSA-x2pv-fph3-phfx
EPSS Score
-
CWE
CWE-352
Published
10/29/2025
Updated
10/29/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.jenkins-ci.plugins:nexus-task-runnermaven<= 0.9.2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

No analysis provided

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

J*nkins N*xus T*sk Runn*r Plu*in *.*.* *n* **rli*r *o*s not p*r*orm * p*rmission ****k in *n *TTP *n*point. T*is *llows *tt**k*rs wit* Ov*r*ll/R*** p*rmission to *onn**t to *n *tt**k*r-sp**i*i** URL usin* *tt**k*r-sp**i*i** us*rn*m* *n* p*sswor*. *

Reasoning

No *n*lysis provi***