GCVE - cpe:2.3:a:jenkins_project:jenkins_git_plugin:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_git_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jenkins Project (`860cd631-1316-551d-89a3-5aa9a0d4f462`)
Product	Jenkins Git Plugin (`51e89292-e849-5640-9eaa-b34af1e806fd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-38663`	vulnerable	2026-06-08 05:47:16.787617	Details available Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding. Published: 2022-08-23T16:45:16.000Z Updated: 2024-08-03T11:02:14.161Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2796 http://www.openwall.com/lists/oss-security/2022/08/23/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36884`	vulnerable	2026-06-08 05:46:07.966408	Details available The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository. Published: 2022-07-27T14:21:25.000Z Updated: 2024-08-03T10:14:29.343Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36883`	vulnerable	2026-06-08 05:46:07.966080	Details available A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. Published: 2022-07-27T14:21:12.000Z Updated: 2024-08-03T10:14:28.862Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36882`	vulnerable	2026-06-08 05:46:07.964788	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. Published: 2022-07-27T14:20:59.000Z Updated: 2024-08-03T10:14:29.407Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30947`	vulnerable	2026-06-08 05:43:39.864244	Details available Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents. Published: 2022-05-17T14:06:05.000Z Updated: 2024-08-03T07:03:40.003Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478 http://www.openwall.com/lists/oss-security/2022/05/17/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21684`	vulnerable	2026-06-08 05:29:13.127813	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2136`	vulnerable	2026-06-08 05:24:58.968047	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.