Jenkins Git Parameter Plugin

4 results · Clear filters · Feed

• Medium 4.3
  CVE-2026-57286

  Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names

  A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such as branch names, tag names, and revision metadata.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Jun 24, 2026
• Medium 5.4
  CVE-2022-29040

  Stored XSS vulnerability in Jenkins Git Parameter Plugin

  Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Apr 12, 2022
• Medium 5.4
  CVE-2020-2113

  Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)

  Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Feb 12, 2020
• Medium 5.4
  CVE-2020-2112

  Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)

  Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Feb 12, 2020