CVE Daily – Gerrit (High+Critical) https://cvedaily.com/pages/tags/gerrit.html CVE Daily – Gerrit (High+Critical) en Wed, 03 Jun 2026 21:26:48 +0000 [High] CVE-2025-1568 – Access Control Vulnerability in Gerrit chromiumos project configuration in Googl... https://nvd.nist.gov/vuln/detail/CVE-2025-1568 https://nvd.nist.gov/vuln/detail/CVE-2025-1568 Wed, 16 Apr 2025 23:15:44 +0000 High CVE-2025-1568

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

CVSS: 8.8 · CWE: CWE-284

View on NVD

]]> [High] CVE-2019-16551 – A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30... https://nvd.nist.gov/vuln/detail/CVE-2019-16551 https://nvd.nist.gov/vuln/detail/CVE-2019-16551 Tue, 17 Dec 2019 15:15:15 +0000 High CVE-2019-16551

A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.

CVSS: 8.8 · CWE: CWE-352

View on NVD

]]> [High] CVE-2006-3832 – SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and ea... https://nvd.nist.gov/vuln/detail/CVE-2006-3832 https://nvd.nist.gov/vuln/detail/CVE-2006-3832 Tue, 25 Jul 2006 13:22:00 +0000 High CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS: 7.5 · CWE: N/A

View on NVD

]]>