Skip to content

Jenkins Git vulnerabilities

jenkins gitlab logo, jenkins project gitlab logo plugin +1 moreJenkins GitLab Logo Plugin stores credentials unencryptedCVE-2019-10429Fix available5.5 MediumSeptember 25, 2019
jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreViolation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10416Fix available6.5 MediumSeptember 25, 2019
jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreJenkins Violation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10415Fix available6.5 MediumSeptember 25, 2019
jenkins git changelog, jenkins project git changelog plugin +1 moreJenkins Git Changelog Plugin has Insufficiently Protected CredentialsCVE-2019-10414Fix available6.5 MediumSeptember 25, 2019
jenkins git client, jenkins project git client plugin +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Git Client PluginCVE-2019-10392Public exploitFix availableEPSS 23.1%8.8 HighSeptember 12, 2019
jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin Open Redirect vulnerabilityCVE-2019-10372Fix available6.1 MediumAugust 7, 2019
jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin vulnerable to Session FixationCVE-2019-10371Fix available7.5 HighAugust 7, 2019
jenkins github authentication, jenkins project github authentication plugin +1 moreJenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerabilityCVE-2019-10315Fix available8.8 HighApril 30, 2019
jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin missing permission checksCVE-2019-10301Fix available8.8 HighApril 18, 2019
jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin Cross-Site Request Forgery vulnerabilityCVE-2019-10300Fix available8.0 HighApril 18, 2019
jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin session fixation vulnerabilityCVE-2019-1003019Fix available5.9 MediumFebruary 6, 2019
jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin showed plain text client secret in configuration formCVE-2019-1003018Fix available4.3 MediumFebruary 6, 2019
jenkins git, redhat openshift container platform +1 moreCross-Site Request Forgery in Jenkins Git PluginCVE-2019-1003010Fix available4.3 MediumFebruary 6, 2019
jenkins git changelogStored XSS vulnerability in Jenkins Git Changelog PluginCVE-2018-1000426Fix available6.1 MediumJanuary 9, 2019
jenkins githubCSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentialsCVE-2018-1000600Fix availableEPSS 91.0%8.8 HighJune 26, 2018
jenkins gitlab hookJenkins Gitlab Hook Plugin stores and displays GitLab API token in plain textCVE-2018-10001966.5 MediumJune 5, 2018
jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin credential capture vulnerabilityCVE-2018-1000186Fix available6.5 MediumJune 5, 2018
jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Server-Side Request ForgeryCVE-2018-1000185Fix available4.3 MediumJune 5, 2018
jenkins githubJenkins GitHub Plugin server-side request forgery vulnerability existsCVE-2018-1000184Fix available5.4 MediumJune 5, 2018
jenkins githubJenkins GitHub Plugin exposure of sensitive information vulnerability existsCVE-2018-1000183Fix available6.5 MediumJune 5, 2018
jenkins gitServer-Side Request Forgery in Jenkins Git PluginCVE-2018-1000182Fix available6.4 MediumJune 5, 2018
jenkins github pull request builderJenkins GitHub Pull Request Builder PluginCVE-2018-1000143Fix available6.7 MediumApril 5, 2018
jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentialsCVE-2018-1000142Fix available7.8 HighApril 5, 2018
jenkins gitIncorrect Authorization in Jenkins Git PluginCVE-2018-1000110Fix available5.3 MediumMarch 13, 2018
jenkins git clientInsecure temporary file usage in Jenkins Git Client PluginCVE-2017-1000242Fix available3.3 LowNovember 1, 2017
jenkins gitCross-Site Request Forgery in Jenkins Git PluginCVE-2017-1000092Fix available7.5 HighOctober 4, 2017
jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request ForgeryCVE-2017-1000091Fix available6.3 MediumOctober 4, 2017
jenkins github branch sourceJenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDsCVE-2017-1000087Fix available4.3 MediumOctober 4, 2017