CVE-2022-43421: Jenkins Tuleap Git Branch Source

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers to trigger Tuleap projects whose configured repository matches the attacker-specified value.

Affected products

• Jenkins Tuleap Git Branch Source: before 3.2.5 (fixed in 3.2.5)

Published 2022-10-19. Last modified 2026-06-17.