org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2026-9674 via org.jenkins-ci.plugins:jenkins-multijob-plugin (1.9)

org.jenkins-ci.plugins:jenkins-multijob-plugin MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:jenkins-multijob-plugin and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves...

Linux Distros Unpatched Vulnerability : CVE-2024-0199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An...

Improper Access Control

GitLab is vulnerable to Improper Access Control. The vulnerability is due to an authorization bypass affecting gitlab. An attacker could exploit this by utilizing a crafted payload in an old feature branch to bypass CODEOWNERS and perform malicious actions...

CVE-2024-0199

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

Authorization

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

UBUNTU-CVE-2024-0199

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

CVE-2024-0199

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

CVE-2024-0199

Removed by vendor...

CVE-2024-0199 Incorrect Authorization in GitLab

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

CVE-2024-0199: Incorrect Authorization

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2022-43410 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2022-43410 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2020-2305 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2020-2305 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2020-2306 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2020-2306 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2022-30949 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2022-30948 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2022-30947 Source...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4) potentially affected by CVE-2018-1000112 via org.jenkins-ci.plugins:mercurial (1.46)

org.jenkins-ci.plugins:mercurial MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:feature-branch-notifier =1.0, =1.4 Source cves: CVE-2018-1000112 Source...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2017-1000084 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2017-1000084 Source advisory: OSV:GHSA-MC22-25R3-2W9W...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2022-27195 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2022-27195 Source advisory: GHSA-5MPF-HW8F-86W9...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4), org.jenkins-ci.plugins:vectorcast-execution (>=0.16, <=0.61) +1 more potentially affected by CVE-2017-1000390 via org.jenkins-ci.plugins:jenkins-multijob-plugin (>=1.9, <=1.21)

org.jenkins-ci.plugins:jenkins-multijob-plugin MAVEN version =1.9, =1.0, =0.16, =1.1, =1.2 Source cves: CVE-2017-1000390 Source advisory: MEND:CVE-2017-1000390...