Jenkins Gitlab vulnerabilities

• jenkins gitlab, jenkins project gitlab plugin +1 more Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs CVE-2025-24397 Fix available 4.3 MediumJanuary 22, 2025
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more CSRF vulnerability in GitLab Authentication Plugin CVE-2023-39153 Fix available 5.4 MediumJuly 26, 2023
• jenkins gitlab, jenkins project gitlab plugin +1 more Non-constant time webhook token comparison in Jenkins GitLab Plugin CVE-2022-43411 Fix available 5.3 MediumOctober 19, 2022
• jenkins gitlab, jenkins project gitlab plugin +1 more Cross-site Scripting in Jenkins GitLab Plugin CVE-2022-34777 Fix available EPSS 73.6% 5.4 MediumJune 30, 2022
• jenkins gitlab, jenkins project gitlab plugin +1 more Missing permission check in Jenkins GitLab Plugin CVE-2022-30955 Fix available 6.5 MediumMay 17, 2022
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Client Secret stored in plain text by Jenkins GitLab Authentication Plugin CVE-2022-27206 Fix available 6.5 MediumMarch 15, 2022
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Open redirect vulnerability in Jenkins GitLab Authentication Plugin CVE-2022-25196 5.4 MediumFebruary 15, 2022
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin CVE-2020-2228 Fix available 8.8 HighJuly 15, 2020
• jenkins gitlab hook, jenkins project gitlab hook plugin +1 more Reflected XSS vulnerability in Jenkins gitlab-hook Plugin CVE-2020-2096 Public exploit EPSS 93.2% 6.1 MediumJanuary 15, 2020
• jenkins gitlab logo, jenkins project gitlab logo plugin +1 more Jenkins GitLab Logo Plugin stores credentials unencrypted CVE-2019-10429 Fix available 5.5 MediumSeptember 25, 2019
• jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 more Violation Comments to GitLab Plugin has Insufficiently Protected Credentials CVE-2019-10416 Fix available 6.5 MediumSeptember 25, 2019
• jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 more Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials CVE-2019-10415 Fix available 6.5 MediumSeptember 25, 2019
• jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 more Jenkins Gitlab Authentication Plugin Open Redirect vulnerability CVE-2019-10372 Fix available 6.1 MediumAugust 7, 2019
• jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 more Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation CVE-2019-10371 Fix available 7.5 HighAugust 7, 2019
• jenkins gitlab, jenkins project gitlab plugin +1 more Jenkins GitLab Plugin missing permission checks CVE-2019-10301 Fix available 8.8 HighApril 18, 2019
• jenkins gitlab, jenkins project gitlab plugin +1 more Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability CVE-2019-10300 Fix available 8.0 HighApril 18, 2019
• jenkins gitlab hook Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text CVE-2018-1000196 6.5 MediumJune 5, 2018