CVE-2019-10392

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting…

published September 12, 2019

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26229 · 98.0th percentile
Published
2019-09-12T13:55Z
EPSS history
Timeline
  • 12 SEP 13:55Z
    Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting…
    cvelistv5