Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-34146

jenkins-plugin/git-server: missing permission check in Git server Plugin

Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins
Products
Git Server
CVE-2024-23899

jenkins-2-plugins: git-server plugin arbitrary file read vulnerability

Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenkins controller file system.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Git Server Ocp Tools