Skip to content
fr Sign in
5.4 Medium

CVE-2026-92133 Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API…

Description

Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab API token credentials they are not entitled to use.

Affected products and versions

Product Affected versions Fixed in
Jenkins GitLab Plugin Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Jenkins GitLab Plugin

The 8 CVEs of Jenkins GitLab Plugin →
CVE-2026-84664 Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler… 5.4 Medium CVE-2025-24397 An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure… 4.3 Medium CVE-2022-43411 Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided… 5.3 Medium CVE-2022-34777 Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of… Not rated
Track this CVE