org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:git (>=2.5.0-beta4, <=2.5.0-beta5) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.20.0-beta3)

org.jenkins-ci.plugins:git-client MAVEN version 1.20.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.5.0-beta4, =2.5.0-beta5 Source cves: CVE-2019-10392 Sour...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git-server (1.3) +3 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.0.1)

org.jenkins-ci.plugins:git MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:git-server 1.3 - org.jenkins-ci.plugins:scriptler...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (1.3.0)

org.jenkins-ci.plugins:git MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 Source cves: CVE-2022-30949 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.tools:git-parameter (>=0.4.0, <=0.6.2), org.jenkinsci.plugins.spoonscript:spoonscript (>=1.0, <=1.3) +1 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.3.4)

org.jenkins-ci.plugins:git MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.tools:git-parameter =0.4.0, =1.0, =1.3 -...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.2.3, <=2.2.10), org.jenkins-ci.plugins:gitea (>=1.0.1, <=1.1.2) +1 more potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (3.5.0)

org.jenkins-ci.plugins:git MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.2.3, =1.0.1, =2.2.3, =2.2.6 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.0.2-beta-1), org.jenkins-ci.plugins:github-branch-source (>=2.0.0, <=2.0.1-beta-6) +1 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.6.2)

org.jenkins-ci.plugins:git MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.0.0, =2.0.1-beta-6 -...

org.jenkins-ci.plugins:github-branch-source (>=0.1-beta-1, <=1.10.1), org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.5) +2 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3)

org.jenkins-ci.plugins:git MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source =0.1-beta-1, =1.0-beta-1, =1.0, =1.0.0, =1.0.3 Source cves:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =0.1-beta-4 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.2), org.jenkins-ci.plugins:github-branch-source (>=2.0.1, <=2.0.8) +2 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.6.4)

org.jenkins-ci.plugins:git MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.2 - org.jenkins-ci.plugins:github-branch-sourc...

org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.29, <=1.5.0), org.jenkins-ci.plugins:coding-webhook (>=1.0.0, <=1.4.3) +3 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.4.1)

org.jenkins-ci.plugins:git MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:bitbucket-pullrequest-builder =1.4.29, =1.0.0, =1.0.11, =1.1.29, =2.4.0, =2.4.1 Sour...

org.jenkins-ci.plugins:git-parameter (0.3.2), org.jenkins-ci.plugins:pretested-integration (>=2.0, <=2.3.3) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.2.0)

org.jenkins-ci.plugins:git MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-parameter 0.3.2 - org.jenkins-ci.plugins:pretested-integration =2.0, =2.3.3 Sour...

CVE-2022-30947

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents...

CVE-2022-30947

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents...

org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2017-1000092 Source...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.0.2-beta-1), org.jenkins-ci.plugins:github-branch-source (>=2.0.0, <=2.0.1-beta-6) +1 more potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.6.2)

org.jenkins-ci.plugins:git MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.0.0, =2.0.1-beta-6 -...

GHSA-RF5Q-8GX3-XQFC Cross-Site Request Forgery in Jenkins Git Plugin

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenki...

org.jenkins-ci.plugins:jira-ext (>=0.1, <=0.9) potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.2.3)

org.jenkins-ci.plugins:git MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:jira-ext =0.1, =0.9 Source cves: CVE-2017-1000092 Source advisory:...

org.jenkins-ci.plugins:git (2.0-beta-2) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.3.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.0-beta-2 Source cves: CVE-2017-1000242 Source advisory:...