Cross-site Scripting in Jenkins GitLab Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-34777 · ADVISORY
• jenkinsci/gitlab-plugin commit 24e9a99 · WEB
• jenkinsci/gitlab-plugin · PACKAGE
• jenkins.io/security/advisory/2022-06-30 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:gitlab-plugin

• CVE-2025-24397TRUNG BÌNH 4.3An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacki…
• CVE-2022-43411TRUNG BÌNH 5.3Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhoo…
• CVE-2022-30955TRUNG BÌNH 6.5Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permi…
• CVE-2019-10301CAO 8.8A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method…
• CVE-2019-10300CAO 8.0A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form v…