Path traversal in Jenkins Git Mercurial and Repo Plugins

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-30947 · ADVISORY
• jenkinsci/git-plugin commit b295606 · WEB
• jenkinsci/mercurial-plugin commit 55904fb · WEB
• jenkinsci/repo-plugin commit 3c8e623 · WEB
• jenkinsci/git-plugin · PACKAGE
• jenkins.io/security/advisory/2022-05-17 · WEB
• openwall.com/lists/oss-security/2022/05/17/8 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:git

• CVE-2022-38663TRUNG BÌNH 6.5Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git…
• CVE-2022-36884TRUNG BÌNH 5.3The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs conf…
• CVE-2022-36883CAO 7.5A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to…
• CVE-2022-36882CAO 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs config…
• CVE-2022-30949TRUNG BÌNH 5.3Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins…