org.jenkins-ci.plugins:git

9 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-38663

  Improper masking of credentials Jenkins in Git Plugin

  Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Aug 23, 2022
• Medium 5.3
  CVE-2022-36884

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 6.5
  CVE-2022-36883 Public exploit Scanner template

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 6.5
  CVE-2022-36882

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 6.1
  CVE-2021-21684

  Stored XSS vulnerability in Jenkins Git Plugin

  Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Oct 6, 2021
• Medium 5.4
  CVE-2020-2136

  Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin

  Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Mar 9, 2020
• Medium 4.3
  CVE-2019-1003010

  Cross-Site Request Forgery in Jenkins Git Plugin

  A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.

  git org.jenkins-ci.plugins:git Azure Linux Maven
  Feb 6, 2019
• Medium 6.4
  CVE-2018-1000182

  Server-Side Request Forgery in Jenkins Git Plugin

  A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to caus…

  git org.jenkins-ci.plugins:git Azure Linux Maven
  Jun 5, 2018
• Medium 5.3
  CVE-2018-1000110

  Incorrect Authorization in Jenkins Git Plugin

  An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.

  git org.jenkins-ci.plugins:git Azure Linux Maven
  Mar 13, 2018