Lucene search
K

4 matches found

CNNVD
CNNVD
added 2024/02/12 12:0 a.m.3 views

GitLab and Git Security Vulnerabilities

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab EE versions 16.8 through 16.8.2, whi...

6.5CVSS7AI score0.0002EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/01/24 6:31 p.m.36 views

Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin

GitLab allows sharing a project with another group. Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group. This allows attackers to configure and share a project, resulting in a crafted Pipeline being...

6.5CVSS6.2AI score0.0012EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/01/24 6:15 p.m.3 views

CVE-2024-23901

Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group...

6.5CVSS5.8AI score0.0012EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/24 12:0 a.m.2 views

Jenkins Plugin GitLab Branch Source Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.7AI score0.0012EPSS
Exploits0References5
Rows per page
Query Builder