CVE-2019-10330

Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles…

published May 31, 2019

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02135 · 81.9th percentile
Published
2019-05-31T14:20Z
EPSS history
Timeline
  • 31 MAY 14:20Z
    Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles…
    cvelistv5