Jenkins Gitlab Plugin (Jenkins Project) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-16. Vendor: Jenkins Project.

CVEs of Jenkins Gitlab Plugin

• CVE-2026-92133 - CVSS 5.4 (medium), 2026-09-16: Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key…
• CVE-2026-84664 - CVSS 5.4 (medium), 2026-09-02: Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to…
• CVE-2025-24397 - CVSS 4.3 (medium), 2025-01-22: An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure…
• CVE-2022-43411 - CVSS 5.3 (medium), 2022-10-19: Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal,…
• CVE-2022-34777 - CVSS 5.4 (medium), 2022-06-30: Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored…
• CVE-2022-30955 - CVSS 6.5 (medium), 2022-05-17: Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate…
• CVE-2019-10301 - CVSS 8.8 (high), 2019-04-18: A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers…
• CVE-2019-10300 - CVSS 8 (high), 2019-04-18: A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method…