Jenkins Git vulnerabilities

• jenkins git parameter, jenkins project git parameter plugin +1 more Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names CVE-2026-57286 Fix available 4.3 MediumJune 24, 2026
• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs CVE-2026-57285 Fix available 4.3 MediumJune 24, 2026
• jenkins git client, jenkins project git client plugin +1 more Jenkins Git client Plugin has an OS command injection vulnerability on agents CVE-2026-57282 Fix available 5.0 MediumJune 24, 2026
• jenkins github, jenkins project github plugin +1 more Jenkins GitHub Plugin has an XSS vulnerability CVE-2026-42523 Fix available 9.0 CriticalApril 29, 2026
• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test CVE-2026-42522 Fix available 4.3 MediumApril 29, 2026
• jenkins git client, jenkins project git client plugin +1 more Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin CVE-2025-67640 Fix available 5.0 MediumDecember 10, 2025
• jenkins git client, jenkins project git client plugin +1 more Jenkins Git client Plugin file system information disclosure vulnerability CVE-2025-58458 Fix available 4.3 MediumSeptember 3, 2025
• jenkins git parameter, jenkins project git parameter plugin +1 more Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check CVE-2025-53652 Public exploitFix available 8.2 HighJuly 9, 2025
• jenkins gitlab, jenkins project gitlab plugin +1 more Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs CVE-2025-24397 Fix available 4.3 MediumJanuary 22, 2025
• jenkins git server, jenkins project git server plugin +1 more Jenkins Git server Plugin does not perform a permission check CVE-2024-34146 Fix available 6.5 MediumMay 2, 2024
• jenkins gitbucket, jenkins project gitbucket plugin +1 more Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting CVE-2024-28157 Public exploit 8.0 HighMarch 6, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin CVE-2024-23903 Fix available 5.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more CSRF vulnerability in Jenkins GitLab Branch Source Plugin CVE-2024-23902 Fix available 4.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin CVE-2024-23901 Fix available 6.5 MediumJanuary 24, 2024
• jenkins git server, jenkins project git server plugin +1 more Arbitrary file read vulnerability in Git server Plugin can lead to RCE CVE-2024-23899 Fix available 6.5 MediumJanuary 24, 2024
• jenkins github, jenkins project github plugin +1 more Stored XSS vulnerability in Jenkins GitHub Plugin CVE-2023-46650 Fix available 5.4 MediumOctober 25, 2023
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more CSRF vulnerability in GitLab Authentication Plugin CVE-2023-39153 Fix available 5.4 MediumJuly 26, 2023
• jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 more Jenkins Digital.ai App Management Publisher Plugin missing permission checks CVE-2023-35149 6.5 MediumJune 14, 2023
• jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 more Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery CVE-2023-35148 6.5 MediumJune 14, 2023
• jenkins github pull request coverage status, jenkins project github pull request coverage status plugin +1 more Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin CVE-2023-24442 5.5 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs CVE-2023-24436 4.3 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more Missing permission checks in Jenkins GitHub Pull Request Builder Plugin CVE-2023-24435 6.5 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin CVE-2023-24434 8.8 HighJanuary 24, 2023
• jenkins tuleap git branch source, jenkins project tuleap git branch source plugin +1 more Jenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified value CVE-2022-43421 Fix available 5.3 MediumOctober 19, 2022
• jenkins gitlab, jenkins project gitlab plugin +1 more Non-constant time webhook token comparison in Jenkins GitLab Plugin CVE-2022-43411 Fix available 5.3 MediumOctober 19, 2022
• jenkins git, jenkins project git plugin +1 more Improper masking of credentials Jenkins in Git Plugin CVE-2022-38663 Fix available 6.5 MediumAugust 23, 2022
• jenkins github, jenkins project github plugin +1 more Jenkins GitHub plugin uses weak webhook signature function CVE-2022-36885 Fix available 5.3 MediumJuly 27, 2022
• jenkins git, jenkins project git plugin +1 more Lack of authentication mechanism in Jenkins Git Plugin webhook CVE-2022-36884 Fix available 5.3 MediumJuly 27, 2022
• jenkins git, jenkins project git plugin +1 more Lack of authentication mechanism in Jenkins Git Plugin webhook CVE-2022-36883 Public exploitFix available 7.5 HighJuly 27, 2022
• jenkins git, jenkins project git plugin +1 more Lack of authentication mechanism in Jenkins Git Plugin webhook CVE-2022-36882 Fix available 8.8 HighJuly 27, 2022
• jenkins git client, jenkins project git client plugin +1 more Jenkins Git client plugin 3.11.0 does not perform SSH host key verification CVE-2022-36881 Fix available 8.1 HighJuly 27, 2022
• jenkins gitlab, jenkins project gitlab plugin +1 more Cross-site Scripting in Jenkins GitLab Plugin CVE-2022-34777 Fix available EPSS 73.6% 5.4 MediumJune 30, 2022
• jenkins gitlab, jenkins project gitlab plugin +1 more Missing permission check in Jenkins GitLab Plugin CVE-2022-30955 Fix available 6.5 MediumMay 17, 2022
• jenkins git, jenkins project git plugin +1 more Path traversal in Jenkins Git Mercurial and Repo Plugins CVE-2022-30947 Fix available 7.5 HighMay 17, 2022
• jenkins git parameter, jenkins project git parameter plugin +1 more Stored XSS vulnerability in Jenkins Git Parameter Plugin CVE-2022-29040 Fix available 5.4 MediumApril 12, 2022
• jenkins list git branches parameter, jenkins project list git branches parameter plugin +1 more Stored Cross-site Scripting vulnerability in Jenkins List Git Branches Parameter Plugin CVE-2022-27212 5.4 MediumMarch 15, 2022
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Client Secret stored in plain text by Jenkins GitLab Authentication Plugin CVE-2022-27206 Fix available 6.5 MediumMarch 15, 2022
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Open redirect vulnerability in Jenkins GitLab Authentication Plugin CVE-2022-25196 5.4 MediumFebruary 15, 2022
• jenkins git, jenkins project git plugin +1 more Stored XSS vulnerability in Jenkins Git Plugin CVE-2021-21684 Fix available 6.1 MediumOctober 6, 2021
• jenkins git parameter, jenkins project git parameter plugin +1 more Stored XSS vulnerability in Jenkins Git Parameter Plugin CVE-2020-2238 Fix available 5.4 MediumSeptember 1, 2020
• jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 more Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin CVE-2020-2228 Fix available 8.8 HighJuly 15, 2020
• jenkins github coverage reporter, jenkins project github coverage reporter plugin +1 more Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin CVE-2020-2212 4.3 MediumJuly 2, 2020
• jenkins git, jenkins project git plugin +1 more Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin CVE-2020-2136 Fix available 5.4 MediumMarch 9, 2020
• jenkins digitalocean, jenkins project digitalocean plugin +1 more Token stored in plain text by DigitalOcean Plugin CVE-2020-2126 Fix available 4.3 MediumFebruary 12, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin CVE-2020-2118 Fix available 4.3 MediumFebruary 12, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials CVE-2020-2117 Fix available 4.3 MediumFebruary 12, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials CVE-2020-2116 Fix available 8.8 HighFebruary 12, 2020
• jenkins git parameter, jenkins project git parameter plugin +1 more Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS) CVE-2020-2113 Fix available 5.4 MediumFebruary 12, 2020
• jenkins git parameter, jenkins project git parameter plugin +1 more Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS) CVE-2020-2112 Fix available 5.4 MediumFebruary 12, 2020
• jenkins gitlab hook, jenkins project gitlab hook plugin +1 more Reflected XSS vulnerability in Jenkins gitlab-hook Plugin CVE-2020-2096 Public exploit EPSS 93.2% 6.1 MediumJanuary 15, 2020
• Show olderLoading…