Jenkins Project Jenkins Gerrit Trigger Plugin vulnerabilities
4 vulnerabilities
Known vulnerabilities in Jenkins Project Jenkins Gerrit Trigger Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-29039jenkins project · jenkins gerrit trigger plugin +2 morejenkins project jenkins gerrit trigger pluginJenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.EPSS0.83%MediumCVE-2019-16552jenkins project · jenkins gerrit trigger plugin +2 morejenkins project jenkins gerrit trigger pluginA missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file with a given path on the Jenkins master.EPSS0.62%HighCVE-2019-16551jenkins project · jenkins gerrit trigger plugin +2 morejenkins project jenkins gerrit trigger pluginA cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.EPSS0.69%MediumCVE-2023-24423jenkins project · jenkins gerrit trigger plugin +2 morejenkins project jenkins gerrit trigger pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.EPSS0.49%