Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w5cj-vfc7-9rjq

Опубликовано: 05 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

EPSS

Процентиль: 8%
0.00179
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 4.3
nvd
14 дней назад

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

EPSS

Процентиль: 8%
0.00179
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-693