CVE-2022-36884: Jenkins Git

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.

Affected products

• Jenkins Git: up to and including 4.11.3

Published 2022-07-27. Last modified 2026-06-17.