6.5 Moyenne

CVE-2024-23901 Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared…

Description

Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins GitLab Branch Source Plugin	Versions non publiées

Les 3 CVE de Jenkins GitLab Branch Source Plugin →

CVE-2024-23902 A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier… 4.3 Moyenne CVE-2024-23903 Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when… 5.3 Moyenne

Vous utilisez Jenkins GitLab Branch Source Plugin ?

Suivre cette CVE Surveiller Jenkins GitLab Branch Source Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2024-23901

Chronologie

Publiée 24 janvier 2024
Dernière modification 30 mai 2025

Références

Jenkins Security Advisory 2024-01-24 www.jenkins.io
www.openwall.com www.openwall.com

Suivre cette CVE

CVE-2024-23901 Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared…

Description

Produits et versions touchés

Autres CVE de Jenkins GitLab Branch Source Plugin