Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:git

12 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Path traversal in Jenkins Git Mercurial and Repo Plugins

    Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM content…

  • High 7.5

    Cross-Site Request Forgery in Jenkins Git Plugin

    Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a…