CVE Daily – Gerrit

CVE Daily – Gerrit https://cvedaily.com/pages/tags/gerrit.html CVE Daily – Gerrit en Wed, 03 Jun 2026 21:26:48 +0000 [Medium] CVE-2026-2725 – Incorrect authorization in the "submitted together" feature in Gerrit versions 2... https://nvd.nist.gov/vuln/detail/CVE-2026-2725 https://nvd.nist.gov/vuln/detail/CVE-2026-2725 Wed, 13 May 2026 06:16:14 +0000 Medium CVE-2026-2725

Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review and forcefully submit code to restricted branches via a crafted submission matching the "topic" tag of an unapproved change.

CVSS: 6.0 · CWE: CWE-863

]]> [High] CVE-2025-1568 – Access Control Vulnerability in Gerrit chromiumos project configuration in Googl... https://nvd.nist.gov/vuln/detail/CVE-2025-1568 https://nvd.nist.gov/vuln/detail/CVE-2025-1568 Wed, 16 Apr 2025 23:15:44 +0000 High CVE-2025-1568

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

CVSS: 8.8 · CWE: CWE-284

]]> [Medium] CVE-2023-24423 – A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plug... https://nvd.nist.gov/vuln/detail/CVE-2023-24423 https://nvd.nist.gov/vuln/detail/CVE-2023-24423 Thu, 26 Jan 2023 21:18:16 +0000 Medium CVE-2023-24423

A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

CVSS: 6.5 · CWE: CWE-352

]]> [Medium] CVE-2022-46688 – A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin... https://nvd.nist.gov/vuln/detail/CVE-2022-46688 https://nvd.nist.gov/vuln/detail/CVE-2022-46688 Mon, 12 Dec 2022 09:15:13 +0000 Medium CVE-2022-46688

A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.

CVSS: 6.5 · CWE: CWE-352

]]> [Medium] CVE-2022-29039 – Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and de... https://nvd.nist.gov/vuln/detail/CVE-2022-29039 https://nvd.nist.gov/vuln/detail/CVE-2022-29039 Tue, 12 Apr 2022 20:15:09 +0000 Medium CVE-2022-29039

Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CVSS: 5.4 · CWE: CWE-79

]]> [Medium] CVE-2021-22553 – Any git operation is passed through Jetty and a session is created. No expiry is... https://nvd.nist.gov/vuln/detail/CVE-2021-22553 https://nvd.nist.gov/vuln/detail/CVE-2021-22553 Wed, 17 Feb 2021 12:15:12 +0000 Medium CVE-2021-22553

Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.

CVSS: 6.5 · CWE: CWE-400

]]> [Low] CVE-2020-8920 – An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2... https://nvd.nist.gov/vuln/detail/CVE-2020-8920 https://nvd.nist.gov/vuln/detail/CVE-2020-8920 Thu, 10 Dec 2020 11:15:11 +0000 Low CVE-2020-8920

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.

CVSS: 3.5 · CWE: CWE-285

]]> [Low] CVE-2020-8919 – An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2... https://nvd.nist.gov/vuln/detail/CVE-2020-8919 https://nvd.nist.gov/vuln/detail/CVE-2020-8919 Thu, 10 Dec 2020 11:15:11 +0000 Low CVE-2020-8919

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with restricted access.

CVSS: 3.5 · CWE: CWE-285

]]> [Medium] CVE-2019-16552 – A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier a... https://nvd.nist.gov/vuln/detail/CVE-2019-16552 https://nvd.nist.gov/vuln/detail/CVE-2019-16552 Tue, 17 Dec 2019 15:15:15 +0000 Medium CVE-2019-16552

A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file with a given path on the Jenkins master.

CVSS: 5.4 · CWE: CWE-276

]]> [High] CVE-2019-16551 – A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30... https://nvd.nist.gov/vuln/detail/CVE-2019-16551 https://nvd.nist.gov/vuln/detail/CVE-2019-16551 Tue, 17 Dec 2019 15:15:15 +0000 High CVE-2019-16551

A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.

CVSS: 8.8 · CWE: CWE-352

]]> [Medium] CVE-2019-10467 – Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml fil... https://nvd.nist.gov/vuln/detail/CVE-2019-10467 https://nvd.nist.gov/vuln/detail/CVE-2019-10467 Wed, 23 Oct 2019 13:15:10 +0000 Medium CVE-2019-10467

Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

CVSS: 6.5 · CWE: CWE-522

]]> [Medium] CVE-2018-1000106 – An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin ... https://nvd.nist.gov/vuln/detail/CVE-2018-1000106 https://nvd.nist.gov/vuln/detail/CVE-2018-1000106 Tue, 13 Mar 2018 13:29:00 +0000 Medium CVE-2018-1000106

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

CVSS: 5.4 · CWE: CWE-863

]]> [Medium] CVE-2018-1000105 – An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin ... https://nvd.nist.gov/vuln/detail/CVE-2018-1000105 https://nvd.nist.gov/vuln/detail/CVE-2018-1000105 Tue, 13 Mar 2018 13:29:00 +0000 Medium CVE-2018-1000105

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

CVSS: 4.3 · CWE: CWE-863

]]> [Medium] CVE-2016-5737 – The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-g... https://nvd.nist.gov/vuln/detail/CVE-2016-5737 https://nvd.nist.gov/vuln/detail/CVE-2016-5737 Thu, 12 Jan 2017 23:59:00 +0000 Medium CVE-2016-5737

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.

CVSS: 6.1 · CWE: CWE-79

]]> [High] CVE-2006-3832 – SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and ea... https://nvd.nist.gov/vuln/detail/CVE-2006-3832 https://nvd.nist.gov/vuln/detail/CVE-2006-3832 Tue, 25 Jul 2006 13:22:00 +0000 High CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS: 7.5 · CWE: N/A

]]>