Executive brief
Jenkins GitLab Plugin missing permission checks
Affected products
- Maven org.jenkins-ci.plugins:gitlab-plugin
Junglewise Threat Intelligence
CVE-2019-10301: Jenkins GitLab Plugin missing permission checks
CVE-2019-10301 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:gitlab-plugin (Maven). Vendors: Maven.
Related threats
- Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
- Non-constant time webhook token comparison in Jenkins GitLab Plugin
- Cross-site Scripting in Jenkins GitLab Plugin
- Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
- Missing permission check in Jenkins GitLab Plugin