PatchTheCVEsimple queue vulnerabilities and fixes
Recent CVEs affecting simple queue, with upgrade or downgrade steps. 2 tracked.
Also searched as: simplequeue.
simple queue has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-04-02. Highest priority: CVE-2024-54003 (score 53/100).
- CVE-2025-31723 MEDIUM 4.3 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows atta
- CVE-2024-54003 HIGH 8.0 UPGRADE Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site
FAQ
How do I fix simple queue vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simple queue being exploited right now?
None of the tracked simple queue CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simple queue CVE should I patch first?
CVE-2024-54003 currently ranks highest (53/100): Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site .