org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2022-3688...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (1.3.0)

org.jenkins-ci.plugins:git MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 Source cves: CVE-2022-36883 Source advisory:...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), org.jenkins-ci.plugins:gitlab-oauth (>=1.0.3, <=1.0.9) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.4.4)

org.jenkins-ci.plugins:git MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - br.com.ingenieux.jenkins.plugins:codecommit-url-helper 0.0.1 - org.jenkins-ci.plugins:gitlab-oauth =1.0.3,...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +12 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.4.2)

org.jenkins-ci.plugins:git MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =0.0.8, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0), org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) +7 more potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (3.6.0)

org.jenkins-ci.plugins:git MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-approval-filter 1.0.0 -...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2022-36883 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (3.0.3)

org.jenkins-ci.plugins:git MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

org.jenkins-ci.plugins:git (2.5.0-beta1) potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.20.0-beta1)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.5.0-beta1 Source cves: CVE-2022-36881 Source advisory:...

org.jenkins-ci.plugins:github-pullrequest (>=0.0.1-beta7, <=0.0.1-beta12) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.2.12)

org.jenkins-ci.plugins:git MAVEN version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-pullrequest =0.0.1-beta7, =0.0.1-beta12 Source cves: CVE-2022-36882 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b24) +9 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (2.1.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

Insufficient Permission Check

Jenkins git plugin is vulnerable to an insufficient permission check. An unauthenticated attacker can trigger builds to a malicious GIT repository, changing the job configuration...

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

CVE-2022-36884

The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository...

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

CVE-2022-36884

The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository...

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

Design/Logic Flaw

The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository...

Design/Logic Flaw

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...