org.jenkins-ci.plugins:gitee

3 results · Feed

• Medium 4.3
  CVE-2026-57293

  Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs

  An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored i…

  Jenkins Project Jenkins Gitee Plugin org.jenkins-ci.plugins:gitee Web / CMS Maven
  Jun 24, 2026
• Medium 5.4
  CVE-2026-57291

  Jenkins Gitee Plugin missing permission checks

  Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

  Jenkins Project Jenkins Gitee Plugin org.jenkins-ci.plugins:gitee Web / CMS Maven
  Jun 24, 2026
• Medium 5.4
  CVE-2026-57292

  Jenkins Gitee Plugin has a cross-site request forgery vulnerability

  A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

  Jenkins Project Jenkins Gitee Plugin org.jenkins-ci.plugins:gitee Web / CMS Maven
  Jun 24, 2026