Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:ghprb

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-24436

    Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs

    A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

    Jenkins Project Jenkins GitHub Pull Request Builder Plugin org.jenkins-ci.plugins:ghprb Web / CMS Maven
  • Medium 6.5
    CVE-2023-24435

    Missing permission checks in Jenkins GitHub Pull Request Builder Plugin

    A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturi…

    Jenkins Project Jenkins GitHub Pull Request Builder Plugin org.jenkins-ci.plugins:ghprb Web / CMS Maven
  • Medium 4.2
    CVE-2018-1000186

    Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability

    A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified cre…

    org.jenkins-ci.plugins:ghprb Maven
  • Medium 4.0
    CVE-2018-1000142

    Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials

    An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

    org.jenkins-ci.plugins:ghprb Maven