CVE-2018-1000106: Jenkins Gerrit Trigger

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

Affected products

• Jenkins Gerrit Trigger: up to and including 2.27.4

Published 2018-03-13. Last modified 2026-06-17.