com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger

6 results · Feed

• Medium 6.5
  CVE-2023-24423

  Cross-site request forgery in Jenkins Gerrit Trigger Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Jan 24, 2023
• High 8.0
  CVE-2022-29039

  Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin

  Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Con…

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Apr 12, 2022
• Medium 5.4
  CVE-2019-16552

  Missing permission check in Jenkins Gerrit Trigger Plugin

  A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file …

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Dec 17, 2019
• High 8.8
  CVE-2019-16551

  Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin

  A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Dec 17, 2019
• Medium 5.4
  CVE-2018-1000106

  Incorrect Authorization in Jenkins Gerrit Trigger Plugin

  An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

  com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Maven
  Mar 13, 2018
• Medium 4.3
  CVE-2018-1000105

  Incorrect Authorization in Jenkins Gerrit Trigger Plugin

  An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information abo…

  com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Maven
  Mar 13, 2018