Executive brief
Cross-site Scripting in Jenkins GitLab Plugin
Affected products
- Maven org.jenkins-ci.plugins:gitlab-plugin
Junglewise Threat Intelligence
CVE-2022-34777: Cross-site Scripting in Jenkins GitLab Plugin
CVE-2022-34777 · Severity: low · CVSS 3.1 · Published 2022-07-01
Technologies: org.jenkins-ci.plugins:gitlab-plugin (Maven). Vendors: Maven.
Related threats
- Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
- Non-constant time webhook token comparison in Jenkins GitLab Plugin
- Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
- Jenkins GitLab Plugin missing permission checks
- Missing permission check in Jenkins GitLab Plugin