Vulnerabilities of Jenkins project Jenkins Git Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-38663 | Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log… | Not rated | Aug 23, 2022 |
| CVE-2022-36884 | The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the… | Not rated | Jul 27, 2022 |
| CVE-2022-36883 | A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds… | Not rated | Jul 27, 2022 |
| CVE-2022-36882 | A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger… | Not rated | Jul 27, 2022 |
| CVE-2022-30947 | Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories… | Not rated | May 17, 2022 |
| CVE-2021-21684 | Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit… | Not rated | Oct 6, 2021 |
| CVE-2020-2136 | Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field… | Not rated | Mar 9, 2020 |
Other Jenkins project products
Jenkins 153
Jenkins Script Security Plugin 39
Jenkins Pipeline: Groovy Plugin 11
Jenkins Active Directory Plugin 11
Jenkins Email Extension Plugin 9
Jenkins Job Configuration History Plugin 8
Jenkins Pipeline: Shared Groovy Libraries Plugin 8
Jenkins Build Failure Analyzer Plugin 8
Jenkins NS-ND Integration Performance Publisher Plugin 8
Jenkins OpenId Connect Authentication Plugin 8
Jenkins GitLab Plugin 8
Jenkins Amazon EC2 Plugin 7