Jenkins Git Plugin (Jenkins Project) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-08-23. Vendor: Jenkins Project.

CVEs of Jenkins Git Plugin

• CVE-2022-38663 - CVSS 6.5 (medium), 2022-08-23: Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and…
• CVE-2022-36882 - CVSS 8.8 (high), 2022-07-27: A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an…
• CVE-2022-36884 - CVSS 5.3 (medium), 2022-07-27: The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an…
• CVE-2022-36883 - CVSS 7.5 (high), 2022-07-27: A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an…
• CVE-2022-30947 - CVSS 7.5 (high), 2022-05-17: Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file…
• CVE-2021-21684 - CVSS 6.1 (medium), 2021-10-06: Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause,…
• CVE-2020-2136 - CVSS 5.4 (medium), 2020-03-09: Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored…