CVE-2018-1000110

—

CVSS 3.0

5.3 medium

EPSS

4%p90

Published

Mar 13, 2018 (Mar 13, 2018)

Modified

Jun 17, 2026

Description

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.

Vendors: jenkins
Products: git
Weakness: CWE-863
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.