Jenkins Git Parameter Plugin (Jenkins Project) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-24. Vendor: Jenkins Project.

CVEs of Jenkins Git Parameter Plugin

• CVE-2026-57286 - CVSS 4.3 (medium), 2026-06-24: A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information…
• CVE-2025-53652 - CVSS 8.2 (high), 2025-07-09: Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered…
• CVE-2022-29040 - CVSS 5.4 (medium), 2022-04-12: Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a…
• CVE-2020-2238 - CVSS 5.4 (medium), 2020-09-01: Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site…
• CVE-2020-2113 - CVSS 5.4 (medium), 2020-02-12: Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability…
• CVE-2020-2112 - CVSS 5.4 (medium), 2020-02-12: Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability…