Insecure temporary file usage in Jenkins Git Client Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2017-1000242 · ADVISORY
• jenkinsci/git-client-plugin commit 75ea3fe · WEB
• jenkinsci/git-client-plugin · PACKAGE
• jenkins.io/security/advisory/2017-04-27 · WEB
• securityfocus.com/bid/101940 · WEB
• jenkins.io/security/advisory/2017-04-27 · Mitigation

More vulnerabilities in org.jenkins-ci.plugins:git-client

• CVE-2026-57282MEDIUM 5.0Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH …
• CVE-2025-67640MEDIUM 5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a te…
• CVE-2025-58458MEDIUM 4.3In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the …
• CVE-2022-36881HIGH 8.1Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enablin…
• CVE-2019-10392HIGH 8.8Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls…