摘要:
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.
安全等级: Low
公告ID: KylinSec-SA-2023-1550
发布日期: 2023年7月24日
关联CVE: CVE-2022-36884
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-36884 | KY3.4-4A | git | Unaffected |
| CVE-2022-36884 | KY3.4-5A | git | Unaffected |
| CVE-2022-36884 | KY3.5.1 | git | Unaffected |
| CVE-2022-36884 | KY3.5.2 | git | Unaffected |
