Git (Jenkins) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 197 known versions, newest CVE from 2022-08-23. Vendor: Jenkins.
CVEs of Git
- CVE-2022-38663 - CVSS 6.5 (medium), 2022-08-23: Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and…
- CVE-2022-36884 - CVSS 5.3 (medium), 2022-07-27: The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an…
- CVE-2022-36883 - CVSS 7.5 (high), 2022-07-27: A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an…
- CVE-2022-36882 - CVSS 8.8 (high), 2022-07-27: A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an…
- CVE-2022-30947 - CVSS 7.5 (high), 2022-05-17: Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file…
- CVE-2021-21684 - CVSS 6.1 (medium), 2021-10-06: Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause,…
- CVE-2020-2136 - CVSS 5.4 (medium), 2020-03-09: Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored…
- CVE-2019-1003010 - CVSS 4.3 (medium), 2019-02-06: A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows…
- CVE-2018-1000182 - CVSS 6.4 (medium), 2018-06-05: A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java,…
- CVE-2018-1000110 - CVSS 5.3 (medium), 2018-03-13: An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access…
- CVE-2017-1000092 - CVSS 7.5 (high), 2017-10-05: Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a…
