Jenkins GitLab Plugin

3 results · Clear filters · Feed

• High 8.0
  CVE-2022-34777 EPSS 74%

  Cross-site Scripting in Jenkins GitLab Plugin

  Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

  Jenkins Project Jenkins GitLab Plugin org.jenkins-ci.plugins:gitlab-plugin Web / CMS Maven
  Jun 30, 2022
• High 8.8
  CVE-2019-10301

  Jenkins GitLab Plugin missing permission checks

  A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified creden…

  Jenkins Project Jenkins GitLab Plugin org.jenkins-ci.plugins:gitlab-plugin Web / CMS Maven
  Apr 18, 2019
• High 8.0
  CVE-2019-10300

  Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability

  A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obt…

  Jenkins Project Jenkins GitLab Plugin org.jenkins-ci.plugins:gitlab-plugin Web / CMS Maven
  Apr 18, 2019