com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.8.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =2.2.0...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10384 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10354 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2019-10353 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

Jenkins GitLab Plugin missing permission checks

Jenkins GitLab Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored i...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:gitbucket (>=0.5.1, <=0.7) +1 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.2.1)

org.jenkins-ci.plugins:git MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:gitbucket =0.5.1, =1.0.7, =1.1.3 Source cves:...

GHSA-5PHJ-QV74-PV4W Missing permission check in Jenkins GitLab Plugin

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. An enumeration of credentials IDs in GitLab Plugin 1.5.32 requires the appropriate...

org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.29, <=1.5.0), org.jenkins-ci.plugins:coding-webhook (>=1.0.0, <=1.4.3) +3 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.4.1)

org.jenkins-ci.plugins:git MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-pullrequest-builder =1.4.29, =1.0.0, =1.0.11, =1.1.29, =2.4.0, =2.4.1 Sour...

org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2022-30949 Source...

org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.29, <=1.5.0), org.jenkins-ci.plugins:coding-webhook (>=1.0.0, <=1.4.3) +3 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.4.1)

org.jenkins-ci.plugins:git MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-pullrequest-builder =1.4.29, =1.0.0, =1.0.11, =1.1.29, =2.4.0, =2.4.1 Sour...

CVE-2022-30955

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

Information disclosure

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2022-30955

CVE-2022-30955 affects Jenkins GitLab Plugin (≤ 1.5.31). The issue is a missing permission check on an HTTP endpoint that allows users with Overall/Read to enumerate credentials IDs stored in Jenkins, exposing credential identifiers. The primary sources (NVD entry and related advisories) describe...

CVE-2022-30955

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2017-1000092 Source...

CVE-2022-30955: Missing Authorization

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

PT-2022-20410 · Jenkins · Jenkins Git Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins GitLab Plugin versions 1.5.31 and earlier Description: The issue allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins due to a missing permission check in an HTTP endpoint...

Missing permission check in gitlab-plugin allows enumerating credentials IDs

gitlab-plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability...