Jenkins Gerrit Trigger vulnerabilities
6 CVEs affecting Jenkins Gerrit Trigger, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24423, published 2023-01-26.
More from Jenkins.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2018-1000106, published 2018-03-13. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with…
- CVE-2022-29039, published 2022-04-12. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site…
- CVE-2019-16551, published 2019-12-17. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified…
- CVE-2018-1000105, published 2018-03-13. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with…
- CVE-2019-16552, published 2019-12-17. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using…
- CVE-2023-24423, published 2023-01-26. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.