Known vulnerabilities in Jenkins project Jenkins Git Parameter Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-57286 | A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with… | 4.3 Medium | Jun 24, 2026 |
| CVE-2025-53652 | Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to… | 8.2 High | Jul 9, 2025 |
| CVE-2022-29040 | Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views… | Not rated | Apr 12, 2022 |
| CVE-2020-2238 | Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters'… | Not rated | Sep 1, 2020 |
| CVE-2020-2113 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored… | Not rated | Feb 12, 2020 |
| CVE-2020-2112 | Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a… | Not rated | Feb 12, 2020 |
Other Jenkins project products
Jenkins 153
Jenkins Script Security Plugin 39
Jenkins Pipeline: Groovy Plugin 11
Jenkins Active Directory Plugin 11
Jenkins Email Extension Plugin 9
Jenkins GitLab Plugin 8
Jenkins Build Failure Analyzer Plugin 8
Jenkins Job Configuration History Plugin 8
Jenkins OpenId Connect Authentication Plugin 8
Jenkins NS-ND Integration Performance Publisher Plugin 8
Jenkins Pipeline: Shared Groovy Libraries Plugin 8
Jenkins Amazon EC2 Plugin 7