Git vulnerabilities

2 known vulnerabilities in Git from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jenkins Git Plugin: Missing Authorization

  CVE-2022-36883Jul 27, 2022JenkinsEPSS 7%

  A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

• 8.8 High severity

  Jenkins Git Plugin: Cross-Site Request Forgery

  CVE-2022-36882Jul 27, 2022Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.