Login Request a demo
JG
Product
Jenkins GitLab Branch Source Plugin
by Jenkins Project · last CVE Jan 24, 2024
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins GitLab Branch Source Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-23901
6.5
0%
Jan 24
Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to…
Affected: through 684.vea_fa_7c1e2fe3
CVE-2024-23903
5.3
0%
Jan 24
Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are…
Affected: through 684.vea_fa_7c1e2fe3
CVE-2024-23902
4.3
0%
Jan 24
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL
Affected: through 684.vea_fa_7c1e2fe3
Showing 3