Executive brief
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:gitlab-plugin
Junglewise Threat Intelligence
CVE-2025-24397: Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
CVE-2025-24397 · Severity: low · CVSS 3.1 · Published 2025-01-22
Technologies: org.jenkins-ci.plugins:gitlab-plugin (Maven). Vendors: Maven.