Known vulnerabilities in Git plugin

Vendor: Jenkins
Software: Git plugin
Software CPE: cpe:2.3:a:jenkins:git_plugin:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Git plugin Git plugin is affected by 7 known vulnerabilities: 2 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66742 - Insufficiently Protected Credentials
CVE-2022-38663
CWE-522 Low
No
No
4.11.5 24.08.2022 SB2022082412
#VU65850 - Exposure of sensitive information to an unauthorized actor
CVE-2022-36884
CWE-200 Medium
No
No
4.11.4 28.07.2022 SB2022072817
SB2023011328
SB2023020889
and 2 more
#VU65848 - Missing Authorization
CVE-2022-36883
CWE-862 Medium
No
No
4.11.4 28.07.2022 SB2022072817
SB2023011328
SB2023020889
and 2 more
#VU65847 - Cross-Site Request Forgery (CSRF)
CVE-2022-36882
CWE-352 Low
No
No
4.11.4 28.07.2022 SB2022072817
SB2023011328
SB2023020889
and 2 more
#VU63361 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30947
CWE-200 Low
No
No
4.11.2 18.05.2022 SB2022051809
#VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21684
CWE-79 Low
No
No
4.8.3 08.10.2021 SB2021100806
SB2023022165
SB2022031044
and 1 more
#VU26006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2136
CWE-79 Low
No
No
4.2.1 11.03.2020 SB2020031129
SB2020063006
SB2020061842
and 1 more