CVE-2020-2228: Jenkins GitLab Authentication

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalation vulnerability.

Affected products

• Jenkins GitLab Authentication: up to and including 1.5

Published 2020-07-15. Last modified 2026-06-17.