description: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group.
affected:
{
vendor: Jenkins Project
product: Jenkins GitLab Branch Source Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 684.vea_fa_7c1e2fe3, status: affected
defaultStatus: unaffected
}