CVE-2018-1999030: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks
Summary
CVE-2018-1999030: An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceLis... Affects org.jenkins-ci.plugins:maven-artifact-choicelistprovider versions < 1.3.2. Fixed in 1.3.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin is a plugin for Jenkins, a popular open-source automation server. This plugin integrates with Nexus, a repository manager for storing and managing artifacts. It provides functionality for selecting Maven artifacts from Nexus repositories as build parameters in Jenkins jobs. The plugin allows users to choose artifacts from Nexus repositories and use them in their builds. However, versions 1.3.1 and earlier of the plugin contain a vulnerability that exposes sensitive information and lacks permission checks.
Vulnerability Detail
The vulnerability in the Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins. This vulnerability exists in the ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, and Nexus3ChoiceListProvider.java files. Attackers can exploit this vulnerability by performing a Cross-Site Request Forgery (CSRF) attack, which tricks a user into unknowingly executing unwanted actions on a web application in which they are authenticated. By exploiting this vulnerability, attackers can gain access to sensitive information, such as credentials, stored in Jenkins. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level.
How To Fix
Latest published version: 410.v93a_3e2d7c777 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.3.2
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is recommended to follow the fix mentioned above and upgrade the plugin to the latest version.
Conclusion
The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin contains a vulnerability that exposes sensitive information and lacks permission checks. Upgrading the plugin to version 1.3.2 or later is recommended to fix the vulnerability and enhance security. It is important to regularly update plugins and follow best practices for securing Jenkins installations. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:maven-artifact-choicelistprovider →
FAQ
This vulnerability allows attackers to capture credentials stored in Jenkins, potentially leading to unauthorized access to sensitive information and systems.
You can use Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software using just the pom.xml file.
There is no specific information about known exploits for this vulnerability. However, it is important to apply the recommended fix to prevent any potential exploitation.
There may be alternative plugins or solutions available for integrating Jenkins with Nexus repositories. It is recommended to explore other plugins or consult the Jenkins community for recommendations.
You can find more information about this vulnerability in the GitHub Advisory Database (https://github.com/github/advisory-database) and the National Vulnerability Database (https://nvd.nist.gov).
References
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:maven-artifact-choicelistprovider.
