Cross-site Scripting in Jenkins GitLab Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-34777 · ADVISORY
• jenkinsci/gitlab-plugin commit 24e9a99 · WEB
• jenkinsci/gitlab-plugin · PACKAGE
• jenkins.io/security/advisory/2022-06-30 · WEB

org.jenkins-ci.plugins:gitlab-plugin のその他の脆弱性

• CVE-2025-24397中 4.3An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacki…
• CVE-2022-43411中 5.3Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhoo…
• CVE-2022-30955中 6.5Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permi…
• CVE-2019-10301高 8.8A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method…
• CVE-2019-10300高 8.0A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form v…