Jenkins Project Jenkins Themis Plugin

• CVE-2025-64137 Medium 4.3 A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server. 0.3%
• CVE-2025-64136 Medium 4.3 A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server. 0.2%