Jenkins Gitlab Branch Source Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-01-24. Vendor: Jenkins Project.

CVEs of Jenkins Gitlab Branch Source Plugin

• CVE-2024-23903 - CVSS 5.3 (medium), 2024-01-24: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and…
• CVE-2024-23902 - CVSS 4.3 (medium), 2024-01-24: A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an…
• CVE-2024-23901 - CVSS 6.5 (medium), 2024-01-24: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group,…