Veille CVE

Recherche « Jenkins Project Jenkins Gitee Plugin »

4 CVE

Critique 0 Élevée 0 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Gitee Plugin » ✕
  1. CVE-2026-92140 6.8 Moyenne

    Jenkins Project Jenkins Gitee Plugin

    Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.

  2. CVE-2026-57293 4.3 Moyenne

    Jenkins Project Jenkins Gitee Plugin

    An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.

  3. CVE-2026-57292 5.4 Moyenne

    Jenkins Project Jenkins Gitee Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

  4. CVE-2026-57291 5.4 Moyenne

    Jenkins Project Jenkins Gitee Plugin

    Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.