Jenkins Project Jenkins GitLab Branch Source Plugin

• CVE-2024-23903 Medium 5.3 Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially al 0.5%
• CVE-2024-23902 Medium 4.3 A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL. 0.3%
• CVE-2024-23901 Medium 6.5 Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a proj 0.5%