Veille CVE

Recherche « Jenkins Project Jenkins GitLab Plugin »

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins GitLab Plugin » ✕
  1. CVE-2026-92133 5.4 Moyenne

    Jenkins Project Jenkins GitLab Plugin

    Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab API token credentials they are not entitled to use.

  2. CVE-2026-84664 5.4 Moyenne

    Jenkins Project Jenkins GitLab Plugin

    Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.

  3. CVE-2026-70444 4.3 Moyenne

    Jenkins Project Jenkins Violation Comments to GitLab Plugin

    A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.