Servers and applications
CVE-2019-10330
Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted.
- Severity
- High 7.5
- Published
- 31 May 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.1% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 10 Nov 2026
- Weakness
- Missing authorization (CWE-862)
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Change data
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GiteaServers and applications · cpe:a:gitea:gitea |
|