{"id":"CVE-2018-1999037","details":"A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource.","aliases":["GHSA-63jg-5wv6-7ghv"],"modified":"2026-07-08T18:17:47.868125Z","published":"2018-08-01T13:29:00.920Z","references":[{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2018-07-30/#SECURITY-997"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/resource-disposer-plugin","events":[{"introduced":"0"},{"last_affected":"fd0ec360299bb3677ef01e04ccdd767fd16be3b9"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:resource_disposer:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"0.11"}],"source":"CPE_RANGE"}}],"versions":["resource-disposer-0.11","resource-disposer-0.10","resource-disposer-0.9","resource-disposer-0.8","resource-disposer-0.7","resource-disposer-0.6","resource-disposer-0.5","resource-disposer-0.4","resource-disposer-0.3","resource-disposer-0.2","resource-disposer-0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1999037.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}]}