Aller au contenu
en Se connecter
5.0 Moyenne

CVE-2025-67640 Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of…

Description

Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Git Client Plugin 6.4 premières → 6.4.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Jenkins Git Client Plugin

Les 5 CVE de Jenkins Git Client Plugin →
CVE-2026-57282 Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded… 5.0 Moyenne CVE-2025-58458 In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ… 4.3 Moyenne CVE-2022-36881 Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git… Non notée CVE-2019-10392 Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an… Non notée
Suivre cette CVE