CVE-2022-36884

2022-07-2715:15:08

Google

osv.dev

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

35.7%

JSON

The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.

CPENameOperatorVersion
git-plugineqgit-3.4.0-alpha-1
git-plugineqgit-1.0.1
git-plugineqgit-2.0
git-plugineqgit-4.7.0
git-plugineqgit-1.1.4
git-plugineqgit-2.3.5
git-plugineqgit-1.1.16
git-plugineqgit-1.1.1
git-plugineqgit-4.8.3
git-plugineqgit-1.1.24

Name	Operator	Version
git-plugin	eq	git-3.4.0-alpha-1
git-plugin	eq	git-1.0.1
git-plugin	eq	git-2.0
git-plugin	eq	git-4.7.0
git-plugin	eq	git-1.1.4
git-plugin	eq	git-2.3.5
git-plugin	eq	git-1.1.16
git-plugin	eq	git-1.1.1
git-plugin	eq	git-4.8.3
git-plugin	eq	git-1.1.24