Git Parameter

git_parameter

Vendor: Jenkins • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-57286 1Jenkins 1Git Parameter Jun 26, 2026 Jun 24, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such as branch names, tag...Show more A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such as branch names, tag names, and revision metadata.Show less
CVE-2025-53652 1Jenkins 1Git Parameter Jun 17, 2026 Jul 9, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inje...Show more Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.Show less
CVE-2022-29040 1Jenkins 1Git Parameter Jun 17, 2026 Apr 12, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by att...Show more Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2020-2238 1Jenkins 1Git Parameter Jun 17, 2026 Sep 1, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/C...Show more Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.Show less
CVE-2020-2113 1Jenkins 1Git Parameter Jun 17, 2026 Feb 12, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.
CVE-2020-2112 1Jenkins 1Git Parameter Jun 17, 2026 Feb 12, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.