Vulnerabilities > CVE-2022-43421 - Missing Authorization vulnerability in Jenkins Tuleap GIT Branch Source

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
jenkins
CWE-862

Summary

A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers to trigger Tuleap projects whose configured repository matches the attacker-specified value.

Common Weakness Enumeration (CWE)