Jenkins Assembla merge request builder Plugin

1 result · Clear filters · Feed

• Medium 5.3
  CVE-2023-30521

  Jenkins Assembla merge request builder Plugin missing authentication to access endpoint

  A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.

  Jenkins Project Jenkins Assembla merge request builder Plugin org.jenkins-ci.plugins:assembla-merge-request-builder Web / CMS Maven
  Apr 12, 2023