{"id":"CVE-2019-10392","aliases":["EUVD-2022-4225","GHSA-hw6x-2qwv-rxr7","RHBA-2020:0522","RHBA-2020:0527","RHBA-2020:0690","RHSA-2020:2478"],"status":"published","title":"Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin","description":"Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.23079,"percentile":0.9777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-78"],"published":"2019-09-12T13:55:15Z","modified":"2026-10-24T10:30:35Z","exploits":[{"source":"pocgithub","id":"jas502n/CVE-2019-10392","title":"jas502n/CVE-2019-10392","date":"2019-09-26","url":"https://github.com/jas502n/CVE-2019-10392"},{"source":"pocgithub","id":"FortheKahZModan/CVE-2019-10392_EXP","title":"FortheKahZModan/CVE-2019-10392_EXP","date":"2019-09-29","url":"https://github.com/FortheKahZModan/CVE-2019-10392_EXP"},{"source":"pocgithub","id":"shoucheng3/jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4","title":"shoucheng3/jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4","date":"2025-08-16","url":"https://github.com/shoucheng3/jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4"}],"fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:git-client","fixed_in":["2.8.5"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-enterprise-service-catalog","fixed_in":["1:4.2.20-202002170402.git.1.159e2f5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-enterprise-service-catalog-svcat","fixed_in":["1:4.2.20-202002170402.git.1.159e2f5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-openshift-service-idler","fixed_in":["0:4.2.20-202002170402.git.1.43218bc.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"cri-o","fixed_in":["0:1.14.12-19.dev.rhaos4.2.git313d784.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins","fixed_in":["0:2.204.1.1581951349-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins-2-plugins","fixed_in":["0:4.2.1581952573-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift","fixed_in":["0:4.2.20-202002140432.git.0.47933cb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-ansible","fixed_in":["0:4.2.20-202002140432.git.187.2308b53.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-clients","fixed_in":["0:4.2.20-202002140432.git.1.5dc67c9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-clients-redistributable","fixed_in":["0:4.2.20-202002140432.git.1.5dc67c9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-hyperkube","fixed_in":["0:4.2.20-202002140432.git.0.47933cb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr","fixed_in":["0:4.2.20-202002140432.git.1.d9a72a5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-cni","fixed_in":["0:4.2.20-202002140432.git.1.d9a72a5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-common","fixed_in":["0:4.2.20-202002140432.git.1.d9a72a5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-controller","fixed_in":["0:4.2.20-202002140432.git.1.d9a72a5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"python2-kuryr-kubernetes","fixed_in":["0:4.2.20-202002140432.git.1.d9a72a5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o","fixed_in":["0:1.14.12-10.dev.rhaos4.2.git313d784.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o-debuginfo","fixed_in":["0:1.14.12-10.dev.rhaos4.2.git313d784.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o-debugsource","fixed_in":["0:1.14.12-10.dev.rhaos4.2.git313d784.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"machine-config-daemon","fixed_in":["0:4.2.20-202002170402.git.1.a83336a.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift","fixed_in":["0:4.2.20-202002140432.git.0.47933cb.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-clients","fixed_in":["0:4.2.20-202002140432.git.1.5dc67c9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-clients-redistributable","fixed_in":["0:4.2.20-202002140432.git.1.5dc67c9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-hyperkube","fixed_in":["0:4.2.20-202002140432.git.0.47933cb.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"atomic-enterprise-service-catalog","fixed_in":["1:4.1.37-202003020601.git.0.5784dc4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"atomic-enterprise-service-catalog-svcat","fixed_in":["1:4.1.37-202003020601.git.0.5784dc4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"cri-o","fixed_in":["0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"cri-o-debuginfo","fixed_in":["0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins","fixed_in":["0:2.204.2.1583849753-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins-2-plugins","fixed_in":["0:4.1.1583850385-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-ansible","fixed_in":["0:4.1.37-202002280447.git.1.bb180eb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-clients","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-clients-redistributable","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-hyperkube","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"containers-common","fixed_in":["1:0.1.32-6.git1715c90.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o","fixed_in":["0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o-debuginfo","fixed_in":["0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o-debugsource","fixed_in":["0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-clients","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-clients-redistributable","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-hyperkube","fixed_in":["0:4.1.37-202002280447.git.0.543873e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"podman","fixed_in":["0:1.0.2-3.dev.git96ccc2e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-debuginfo","fixed_in":["0:1.0.2-3.dev.git96ccc2e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-debugsource","fixed_in":["0:1.0.2-3.dev.git96ccc2e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-docker","fixed_in":["0:1.0.2-3.dev.git96ccc2e.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"runc","fixed_in":["0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"runc-debuginfo","fixed_in":["0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"runc-debugsource","fixed_in":["0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo","fixed_in":["1:0.1.32-6.git1715c90.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo-debuginfo","fixed_in":["1:0.1.32-6.git1715c90.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo-debugsource","fixed_in":["1:0.1.32-6.git1715c90.el8_0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:git-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.8.4"},{"fixed":"2.8.5"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:git-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5"}]}],"versions":["1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.1","1.1.1","1.1.2","1.10.0","1.10.1","1.10.2","1.11.0","1.11.1","1.12.0","1.13.0","1.14.0","1.14.1","1.15.0","1.16.1","1.17.0","1.17.1","1.18.0","1.19.0","1.19.1","1.19.2","1.19.3","1.19.4","1.19.5","1.19.6","1.19.7","1.2.0","1.20.0-beta1","1.20.0-beta2","1.20.0-beta3","1.20.2","1.21.0","1.3.0","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.5.0","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.9.2","2.0.0","2.0.0-beta1","2.0.0-beta2","2.0.0-beta3","2.0.0-beta4","2.1.0","2.2.0","2.2.1","2.3.0","2.4.0","2.4.1","2.4.2","2.4.4","2.4.5","2.4.6","2.5.0","2.6.0","2.7.0","2.7.1","2.7.2","2.7.3","2.7.3.1","2.7.4","2.7.4.1","2.7.5","2.7.6","2.7.7","2.7.7.1","2.8.0","2.8.1","2.8.2","2.8.3","2.8.4"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.20-202002170402.git.1.159e2f5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.20-202002170402.git.1.159e2f5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002170402.git.1.43218bc.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-19.dev.rhaos4.2.git313d784.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.204.1.1581951349-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1581952573-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.0.47933cb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.187.2308b53.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.5dc67c9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.5dc67c9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.0.47933cb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.d9a72a5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.d9a72a5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.d9a72a5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.d9a72a5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"python2-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.d9a72a5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-10.dev.rhaos4.2.git313d784.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-10.dev.rhaos4.2.git313d784.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-10.dev.rhaos4.2.git313d784.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"machine-config-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002170402.git.1.a83336a.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.0.47933cb.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.5dc67c9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.1.5dc67c9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.20-202002140432.git.0.47933cb.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.3.3-202002170501.git.1.f30799e.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.3.3-202002170501.git.1.f30799e.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.4feff9c.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-20.dev.rhaos4.3.git11c04e3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-20.dev.rhaos4.3.git11c04e3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.204.1.1581950993-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1581956184-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.0.e38059c.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002142331.git.173.bb0b5a1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002142331.git.173.bb0b5a1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.1.ff73b47.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.1.ff73b47.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.0.e38059c.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-22.dev.rhaos4.3.git11c04e3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-22.dev.rhaos4.3.git11c04e3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-22.dev.rhaos4.3.git11c04e3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.0-1.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-64.git20200123.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"machine-config-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.6b1b155.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.0.e38059c.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.1.ff73b47.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.1.ff73b47.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002140552.git.0.e38059c.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.3b8b4cc.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.3b8b4cc.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.3b8b4cc.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.3b8b4cc.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"python3-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.3-202002170501.git.1.3b8b4cc.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-4.git21fdece.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-4.git21fdece.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-4.git21fdece.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-1.rhaos4.3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.37-202003020601.git.0.5784dc4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.37-202003020601.git.0.5784dc4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.204.2.1583849753-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.1583850385-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.1.bb180eb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-6.git1715c90.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.37-202002280447.git.0.543873e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.dev.git96ccc2e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.dev.git96ccc2e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.dev.git96ccc2e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.dev.git96ccc2e.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-6.git1715c90.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-6.git1715c90.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-6.git1715c90.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1591354111-1.el7"}]}],"bundled":8}],"products":[{"vendor":"jenkins","product":"git_client"},{"vendor":"jenkins project","product":"jenkins git client plugin"}],"references":[{"url":"https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1534","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2019/09/12/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10392","tags":["advisory"]},{"url":"https://github.com/jenkinsci/git-client-plugin/commit/899123fa2eb9dd2c37137aae630c47c6be6b4b02","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hw6x-2qwv-rxr7"},{"url":"https://access.redhat.com/errata/RHBA-2020:0522","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802082","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0522.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10392","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0527","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802141","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0527.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798453","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8608","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0690","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800580","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0690.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2478","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819652","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2478.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16538","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2109","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2109","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1710","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2110","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1713","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2111","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2111","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2111","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1725","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2134","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1754","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2136","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1723","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2019-10392","description":"Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2019-09-12T13:55:15Z","modified":"2024-08-04T22:17:20.645Z","updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2022-4225","description":"Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2019-09-12T13:55:15Z","modified":"2024-08-04T22:17:20Z","updated_at":"2026-11-03T02:40:53.055308Z"}],"ghsa":[{"id":"GHSA-hw6x-2qwv-rxr7","title":"Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin","description":"Jenkins Git Client Plugin 2.8.4 and earlier did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2022-05-24T16:55:58Z","modified":"2023-12-13T10:08:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:37:25.311671Z"}],"nvd":[{"id":"CVE-2019-10392","description":"Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2019-09-12T14:15:11.257Z","modified":"2026-06-17T02:10:51.027Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:28.126831Z"}],"osv":[{"id":"CVE-2019-10392","description":"Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2019-09-12T14:15:11.257Z","modified":"2026-10-24T10:30:35.616970342Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.383287Z"},{"id":"GHSA-hw6x-2qwv-rxr7","title":"Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin","description":"Jenkins Git Client Plugin 2.8.4 and earlier did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.","status":"published","published":"2022-05-24T16:55:58Z","modified":"2024-02-16T08:18:47.231984Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:46:49.621585Z"},{"id":"RHBA-2020:0522","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.2.20 packages update","status":"published","published":"2024-09-16T03:31:26Z","modified":"2026-06-27T10:08:47Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:0527","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.3 packages update","status":"published","published":"2024-09-16T03:31:35Z","modified":"2026-06-28T10:33:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:0690","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.1.38 packages update","status":"published","published":"2024-09-16T03:31:17Z","modified":"2026-06-27T10:08:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:2478","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-2-plugins security update","status":"published","published":"2024-09-16T04:30:15Z","modified":"2026-06-27T10:10:19Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"}]}}