Non notée
CVE-2021-21684 Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit…
Description
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Git Plugin 4.8 | premières → 4.8.2 | Pas de correctif indiqué |
| Jenkins Git Plugin 4.7 | premières → < 4.7.1.1 | 4.7.1.1 |
| Jenkins Git Plugin 4.3 | premières → < 4.3.1 | 4.3.1 |
Autres CVE de Jenkins Git Plugin
Les 7 CVE de Jenkins Git Plugin →
CVE-2022-38663
Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log…
Non notée
CVE-2022-36884
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the…
Non notée
CVE-2022-36883
A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds…
Non notée
CVE-2022-36882
A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger…
Non notée