CVE-2019-10392
HIGHJenkins Git Client Plugin < 2.8.4 - OS Command Injection via Git ls-remote URL Argument
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-10392. PoCs published by jas502n, ftk-sostupid, shoucheng3.
AI-analyzed exploit summary This repository provides a technical writeup and references for CVE-2019-10392, an RCE vulnerability in Jenkins Git Client Plugin 2.8.2. It includes environment setup instructions, affected versions, and links to detailed analysis but lacks functional exploit code.
Description
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.
Exploits (3)
This repository provides a technical writeup and references for CVE-2019-10392, an RCE vulnerability in Jenkins Git Client Plugin 2.8.2. It includes environment setup instructions, affected versions, and links to detailed analysis but lacks functional exploit code.
This repository contains a functional Python exploit for CVE-2019-10392, an authenticated RCE vulnerability in Jenkins Git Client Plugin versions <= 2.8.2. The exploit leverages the Git plugin's URL validation feature to execute arbitrary commands via crafted Git repository URLs.
This repository contains source code and documentation for the Jenkins Git Client Plugin, specifically referencing CVE-2019-10392. It includes Java source files, configuration files, and contributing guidelines, but no functional exploit code or technical analysis of the vulnerability itself.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H