5.3
Moyenne
CVE-2022-43411 Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided…
Description
Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins GitLab Plugin 1.5 | premières → 1.5.35 | Pas de correctif indiqué |
Références
- www.jenkins.io www.jenkins.io
- [oss-security] 20221019 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins GitLab Plugin
Les 8 CVE de Jenkins GitLab Plugin →
CVE-2026-92133
Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API…
5.4
Moyenne
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler…
5.4
Moyenne
CVE-2025-24397
An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure…
4.3
Moyenne
CVE-2022-34777
Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of…
Non notée