com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-24423

  Cross-site request forgery in Jenkins Gerrit Trigger Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Jan 24, 2023
• Medium 5.4
  CVE-2019-16552

  Missing permission check in Jenkins Gerrit Trigger Plugin

  A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file …

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Dec 17, 2019
• Medium 5.4
  CVE-2018-1000106

  Incorrect Authorization in Jenkins Gerrit Trigger Plugin

  An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

  com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Maven
  Mar 13, 2018
• Medium 4.3
  CVE-2018-1000105

  Incorrect Authorization in Jenkins Gerrit Trigger Plugin

  An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information abo…

  com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Maven
  Mar 13, 2018