In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy "Forks in the same account" allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.
References
Configurations
No configuration.
History
21 Nov 2024, 09:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2024/03/06/3 - | |
| References | () https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3300 - |
07 Nov 2024, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
| CWE | CWE-281 |
01 May 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Mar 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-06 17:15
Updated : 2024-11-21 09:05
NVD link : CVE-2024-28152
Mitre link : CVE-2024-28152
CVE.ORG link : CVE-2024-28152
JSON object : View
Products Affected
No product.
CWE
CWE-281
Improper Preservation of Permissions