CVE-2022-30947

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.2.7)

org.jenkins-ci.plugins:git MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-tag-message =1.0, =1.5 Source cves: CVE-2022-30947 Source advisory:...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0), org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) +3 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:mercurial (>=2.0-alpha-1, <=2.1)

org.jenkins-ci.plugins:mercurial MAVEN version =2.0-alpha-1, =2.2.0-alpha-1, =1.1.3, =1.0.0, =1.0.2 Source cves: CVE-2022-30947 Source advisory: OSV:GHSA-84CM-VJWM-M979...

org.jenkins-ci.plugins:bitbucket (>=1.1.4, <=1.1.13), org.jenkins-ci.plugins:bitbucket-build-status-notifier (>=1.1.0, <=1.4.2) +2 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:mercurial (1.54)

org.jenkins-ci.plugins:mercurial MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:bitbucket =1.1.4, =1.1.0, =1.3, =1.1.0, =1.1.2 Source cves: CVE-2022-3094...

org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2022-3094...

org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2022-30947 Source...

org.jenkins-ci.plugins:pretested-integration (1.0.0) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:mercurial (1.38)

org.jenkins-ci.plugins:mercurial MAVEN version 1.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:pretested-integration 1.0.0 Source cves: CVE-2022-30947 Source advisory:...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-2, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-2, <=1.2.0-beta-1) +4 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.3.0)

org.jenkins-ci.plugins:git MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-2, =1.1.0-beta-2, =1.1.0-beta-2, =1.1.0-beta-2, =1.1.0-beta-2,...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +12 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.4.2)

org.jenkins-ci.plugins:git MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =0.0.8, =1.0-alpha-1, =1.0-alpha-1,...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2022-30947 Source...

org.jenkins-ci.plugins:github-branch-source (>=0.1-beta-1, <=1.10.1), org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.5) +2 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3)

org.jenkins-ci.plugins:git MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source =0.1-beta-1, =1.0-beta-1, =1.0, =1.0.0, =1.0.3 Source cves:...

org.jenkins-ci.plugins:github-branch-source (2.0.0-beta-1), org.jenkins-ci.plugins:github-organization-folder (1.6-beta-1) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.6.2-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.6.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.0.0-beta-1 -...

org.jenkins-ci.plugins:github-branch-source (2.2.0-beta-2) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.4.0-beta-2)

org.jenkins-ci.plugins:git MAVEN version 3.4.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.2.0-beta-2 Source cves: CVE-2022-30947 Source advisory...

org.jenkins-ci.plugins:jira-ext (>=0.1, <=0.9) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.2.3)

org.jenkins-ci.plugins:git MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:jira-ext =0.1, =0.9 Source cves: CVE-2022-30947 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.0.2-beta-1), org.jenkins-ci.plugins:github-branch-source (>=2.0.0, <=2.0.1-beta-6) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.6.2)

org.jenkins-ci.plugins:git MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.0.0, =2.0.1-beta-6 -...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.2.3, <=2.2.10), org.jenkins-ci.plugins:gitea (>=1.0.1, <=1.1.2) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.5.0)

org.jenkins-ci.plugins:git MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.2.3, =1.0.1, =2.2.3, =2.2.6 Source cves:...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-3, <=1.2.0-beta-4) +5 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.4.0)

org.jenkins-ci.plugins:git MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.coravy.hudson.plugins.github:github =1.28.0, =1.2.0-beta-3, =2.2.0, =1.0, =2.2.0, =2.2.2 -...

org.jenkins-ci.plugins:git-tag-message (>=1.6, <=1.6.1) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.5.0)

org.jenkins-ci.plugins:git MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-tag-message =1.6, =1.6.1 Source cves: CVE-2022-30947 Source advisory:...

org.jenkins-ci.tools:git-parameter (0.9.7) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (3.9.1)

org.jenkins-ci.plugins:git MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter 0.9.7 Source cves: CVE-2022-30947 Source advisory: OSV:GHSA-84CM-VJWM-M9...