Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-30955.json"