Beveiligingsadvies

CVE-2024-23901

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-24 17:52:25
Laatst bijgewerkt 2025-05-30 14:16:37
Toegewezen door jenkins
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group.