Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10330

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q98c-rqx7-7ghf

Improper handling of untrusted branches in Gitea Jenkins Plugin Jenkins Gitea Plugin prior to 1.1.2 did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted.

gitlab/maven/org.jenkins-ci.plugins/gitea/CVE-2019-10330

Missing Authorization Jenkins Gitea Plugin 1.1.1 and earlier does not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted.