| Package | Affected versions | Patched versions |
|---|---|---|
| io.jenkins.plugins:gitlab-branch-source | < 688.v5fa | 688.v5fa |
| github branch source | ≤ 684.vea_fa_7c1e2fe3 |
Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier does not require POST requests for a form validation endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.
This vulnerability allows attackers to connect to an attacker-specified URL.
GitLab Branch Source Plugin 688.v5fa_356ee8520 requires POST requests for the affected form validation endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free