24 matches found
jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4
Git Client Plugin Introduction The git client plugin provides git application programming interfaces APIs for Jenkins plugins. It can fetch, checkout, branch, list, merge, and tag repositories. Refer to the API documentation for specific API details. The GitClient interface provides the primary...
org.jenkins-ci.plugins:bitbucket-approve (>=1.0.1, <=1.0.3), org.jenkins-ci.plugins:git (>=2.2.10, <=2.3.2) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.13.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:bitbucket-approve =1.0.1, =2.2.10, =2.3.2 Source cves: CVE-2019-10392...
org.jenkins-ci.plugins:fitnesse (>=1.12, <=1.13), org.jenkins-ci.plugins:git (>=1.4.0, <=1.5.0) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.0.6)
org.jenkins-ci.plugins:git-client MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:fitnesse =1.12, =1.4.0, =1.0, =0.1, =0.4 Source cves: CVE-2019-10392...
org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4), org.jenkins-ci.plugins:github-pullrequest (>=0.0.1-beta7, <=0.0.1-beta12) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.15.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.11, =0.0.1-beta7, =0.4.0, =1.0, =1.3 Source cves:...
com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.6.3)
org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...
com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.18.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0, =1.1.0, =1.33.2, =1.0...
com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +13 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.7)
org.jenkins-ci.plugins:git-client MAVEN version 1.19.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.testinium.jenkins:testinium 1.0 - net.praqma:memory-map =2.2.0, =2.4, =2.3, =2.0.5, =1.5...
org.jenkins-ci.plugins:git (1.6.0-beta-1) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.2.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 1.6.0-beta-1 Source cves: CVE-2019-10392 Source advisory:...
org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.9.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...
org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.12.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...
com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.4.4)
org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...
com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +28 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =1.0.0, =0.0.8, =1.0-alpha-...
org.jenkins-ci.plugins:git (>=2.5.0-beta4, <=2.5.0-beta5) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.20.0-beta3)
org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta4, =2.5.0-beta5 Source cves: CVE-2019-10392 Sour...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) +16 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.11.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...
io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.19.2)
org.jenkins-ci.plugins:git-client MAVEN version 1.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...
com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.0.2)
org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...
org.jenkins-ci.plugins:git (>=2.5.0-beta2, <=2.5.0-beta3) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.20.0-beta2)
org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta2, =2.5.0-beta3 Source cves: CVE-2019-10392 Sour...
de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.16.1)
org.jenkins-ci.plugins:git-client MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =2.5 Source cves:...
CVE-2019-10392
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
