org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2022-3688...

org.jenkins-ci.plugins:git-parameter (0.3.2), org.jenkins-ci.plugins:pretested-integration (>=2.0, <=2.3.3) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.2.0)

org.jenkins-ci.plugins:git MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-parameter 0.3.2 - org.jenkins-ci.plugins:pretested-integration =2.0, =2.3.3 Sour...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4), org.jenkins-ci.plugins:github-pullrequest (>=0.0.1-beta7, <=0.0.1-beta12) +2 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (1.15.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.11, =0.0.1-beta7, =0.4.0, =1.0, =1.3 Source cves:...

org.jenkins-ci.tools:git-parameter (0.9.7) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.9.1)

org.jenkins-ci.plugins:git MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter 0.9.7 Source cves: CVE-2022-36883 Source advisory: OSV:GHSA-V878-67XW-GR...

org.jenkins-ci.tools:git-parameter (0.9.7) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (3.9.1)

org.jenkins-ci.plugins:git MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter 0.9.7 Source cves: CVE-2022-36882 Source advisory: OSV:GHSA-8XWJ-2WGH-GP...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

org.jenkins-ci.plugins:git-parameter (0.3.2), org.jenkins-ci.plugins:pretested-integration (>=2.0, <=2.3.3) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.2.0)

org.jenkins-ci.plugins:git MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-parameter 0.3.2 - org.jenkins-ci.plugins:pretested-integration =2.0, =2.3.3 Sour...

org.jenkins-ci.plugins:git-parameter (0.3.2), org.jenkins-ci.plugins:pretested-integration (>=2.0, <=2.3.3) potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (2.2.0)

org.jenkins-ci.plugins:git MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-parameter 0.3.2 - org.jenkins-ci.plugins:pretested-integration =2.0, =2.3.3 Sour...

com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5), org.jenkins-ci.main:jenkins-test-harness (1.451) +9 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.451)

org.jenkins-ci.main:jenkins-core MAVEN version 1.451 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.base2services.jenkins:github-sqs-plugin =1.0, =2.4, =1.1, =1.3 Source cves: CVE-2019-10406...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2021-21695 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...

org.jenkins-ci.plugins:git-parameter (0.3.2), org.jenkins-ci.plugins:pretested-integration (>=2.0, <=2.3.3) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.2.0)

org.jenkins-ci.plugins:git MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-parameter 0.3.2 - org.jenkins-ci.plugins:pretested-integration =2.0, =2.3.3 Sour...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), org.jenkins-ci.plugins:gitlab-oauth (>=1.0.3, <=1.0.9) +1 more potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.4.4)

org.jenkins-ci.plugins:git MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - br.com.ingenieux.jenkins.plugins:codecommit-url-helper 0.0.1 - org.jenkins-ci.plugins:gitlab-oauth =1.0.3,...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2021-21639 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2021-21615 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...

Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Git Parameter Plugin 0.9.13 escapes the repository field o...

GHSA-J7Q2-C6R4-X2JW Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Git Parameter Plugin 0.9.13 escapes the repository field o...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...