298 matches found
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2021-21604 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2229 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
GHSA-QQ38-MXPQ-RRPJ Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
GitLab Authentication Plugin 1.5 and earlier does not differentiate between user names and hierarchical group names when performing authorization. This allows an attacker with permissions to create groups in GitLab to gain the privileges granted to another user or group. GitLab Authentication...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2221 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2161 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.3.1)
org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2020-2136 Source...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:gitbucket (>=0.5.1, <=0.7) +1 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.2.1)
org.jenkins-ci.plugins:git MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:gitbucket =0.5.1, =1.0.7, =1.1.3 Source cves:...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2103 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2101 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2020-2104 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Violation Comments to GitLab Plugin stored API tokens unencrypted in job config.xml files and its global configuration file org.jenkinsci.plugins.jvctgl.ViolationsToGitLabGlobalConfiguration.xml on the Jenkins controller. These credentials could be viewed by users with Extended Read permission, o...
Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Violation Comments to GitLab Plugin stored API tokens unencrypted in job config.xml files and its global configuration file org.jenkinsci.plugins.jvctgl.ViolationsToGitLabGlobalConfiguration.xml on the Jenkins controller. These credentials could be viewed by users with Extended Read permission, o...
GHSA-3P8R-P4Q5-MC44 Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Violation Comments to GitLab Plugin stored API tokens unencrypted in job config.xml files and its global configuration file org.jenkinsci.plugins.jvctgl.ViolationsToGitLabGlobalConfiguration.xml on the Jenkins controller. These credentials could be viewed by users with Extended Read permission, o...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.8.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =2.2.0...