Known vulnerabilities in Gitlab Authentication
Vendor:
Jenkins
Software:
Gitlab Authentication
Software CPE:
cpe:2.3:a:jenkins:gitlab_authentication:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
1.30
1.29
1.28
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20
1.19
1.18
1.17.1
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
0.29
0.30
0.31
0.32
0.33
1.5
1.4
1.3
1.2
1.1
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.28.1
0.28
0.27
0.26
0.25
0.24
0.23
0.22.3
0.22.2
0.22.1
0.22
0.21.2
0.21.1
0.21
0.20
0.19
0.18
0.17
0.16
0.15
0.14
0.13.1
0.13
0.12
0.11
0.10
0.9
0.8.1
0.8
0.7
0.6
0.5
0.4
0.3
0.2
0.1
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78706 - Cross-Site Request Forgery (CSRF) CVE-2023-39153 |
CWE-352 | Low | 1.18 | 27.07.2023 |
SB2023072718 |
||
| #VU61415 - Cleartext Storage of Sensitive Information CVE-2022-27206 |
CWE-312 | Low | - | 16.03.2022 | - | ||
| #VU60657 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-25196 |
CWE-601 | Medium | - | 16.02.2022 | - | ||
| #VU30134 - Improper Authorization CVE-2020-2228 |
CWE-285 | High | 1.6 | 16.07.2020 |
SB20200716116 |
||
| #VU21543 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2019-10372 |
CWE-601 | Medium | - | 04.10.2019 | - | ||
| #VU21542 - Session Fixation CVE-2019-10371 |
CWE-384 | Medium | - | 04.10.2019 | - |