Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-10392 · ADVISORY
• jenkinsci/git-client-plugin commit 899123f · WEB
• jenkins.io/security/advisory/2019-09-12 · WEB
• openwall.com/lists/oss-security/2019/09/12/2 · WEB

org.jenkins-ci.plugins:git-client のその他の脆弱性

• CVE-2026-57282中 5.0Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH …
• CVE-2025-67640中 5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a te…
• CVE-2025-58458中 4.3In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the …
• CVE-2022-36881高 8.1Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enablin…
• CVE-2017-1000242低 3.3Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure