org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2018-1000110 Source...

com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.4.0)

org.jenkins-ci.plugins:git MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0.0, =1.0, =1.1.0, =1.33.2, =1.0,...

org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.29, <=1.5.0), org.jenkins-ci.plugins:coding-webhook (>=1.0.0, <=1.4.3) +3 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.4.1)

org.jenkins-ci.plugins:git MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-pullrequest-builder =1.4.29, =1.0.0, =1.0.11, =1.1.29, =2.4.0, =2.4.1 Sour...

org.jenkins-ci.plugins:git-tag-message (>=1.6, <=1.6.1) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.5.0)

org.jenkins-ci.plugins:git MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-tag-message =1.6, =1.6.1 Source cves: CVE-2018-1000110 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-2) +1 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.6.2-beta-2)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +29 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (>=3.0.0, <=3.6.0)

org.jenkins-ci.plugins:git MAVEN version =3.0.0, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.2.0-alpha-1, =1.0, =0.1.1, =0.7.0 and more Source cves: CVE-2018-1000110 Source...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +7 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.0.3)

org.jenkins-ci.plugins:git MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0, =1.0, =0.16,...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:gitbucket (>=0.5.1, <=0.7) +1 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.2.1)

org.jenkins-ci.plugins:git MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:gitbucket =0.5.1, =1.0.7, =1.1.3 Source cves:...

org.jenkins-ci.plugins:jira-ext (>=0.1, <=0.9) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.2.3)

org.jenkins-ci.plugins:git MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:jira-ext =0.1, =0.9 Source cves: CVE-2018-1000110 Source advisory:...

org.jenkins-ci.plugins:bitbucket-approve (>=1.0.1, <=1.0.3) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.2.10)

org.jenkins-ci.plugins:git MAVEN version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-approve =1.0.1, =1.0.3 Source cves: CVE-2018-1000110 Source advisory:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.3-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =0.1-beta-4 Source cves:...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2018-1000110 Source...

org.jenkins-ci.plugins:github-branch-source (>=0.1-beta-1, <=1.10.1), org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.5) +2 more potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.3)

org.jenkins-ci.plugins:git MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source =0.1-beta-1, =1.0-beta-1, =1.0, =1.0.0, =1.0.3 Source cves:...

CVE-2018-1000110 affecting package git 2.23.3-1

CVE-2018-1000110 affecting package git 2.23.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-1000110

The CVE-2018-1000110 entry concerns the Jenkins Git Plugin (v3.7.0 and earlier). Root cause: GitStatus.java contains improper authorization, allowing an attacker with network access to enumerate a list of nodes and users via search endpoints (e.g., /search/suggest?query=x and /search/?q=x). Impac...