Git Security Vulnerabilities and Issues — Git CVE List

Lucene search

JenkinsGit

3 matches found

CVE•added 2021/10/06 11:15 p.m.•104 views

CVE-2021-21684

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

6.1CVSS5.7AI score0.00383EPSS

CVE•added 2022/08/23 5:15 p.m.•100 views

CVE-2022-38663

Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (gitUsernamePassword) credentials binding.

6.5CVSS6.3AI score0.017EPSS

CVE•added 2018/06/05 8:29 p.m.•76 views

CVE-2018-1000182

A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a spe...

6.4CVSS6.2AI score0.00039EPSS