- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 12
- Registry
- Maven Central
Advisories 12
- CVE-2022-38663Unrated
Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the…
Affected: fixed in 4.11.5.
- CVE-2022-36884Unrated
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs…
Affected: fixed in 4.11.4.
- CVE-2022-36883Unrated
A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured…
Affected: fixed in 4.11.4.
- CVE-2022-36882Unrated
A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs…
Affected: fixed in 4.11.4.
- CVE-2022-30949Unrated
Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the…
Affected: fixed in 4.11.2.
- CVE-2022-30947Unrated
Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the…
Affected: fixed in 4.11.2.
- CVE-2021-21684Unrated
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying…
Affected: fixed in 4.8.3.
- CVE-2020-2136Unrated
Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation…
Affected: fixed in 4.2.1.
- CVE-2019-1003010Unrated
A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in…
Affected: fixed in 3.9.2.
- CVE-2018-1000182Unrated
A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java…
Affected: fixed in 3.9.1.
- CVE-2018-1000110Unrated
An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker…
Affected: fixed in 3.8.0.
- CVE-2017-1000092Unrated
Git Plugin connects to a user-specified Git repository as part of form validation.
Affected: fixed in 3.3.2.