CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Jenkins. Its EPSS score suggests a 25.8% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2019-10392
Severity
HIGH
CVSS
8.8
EPSS
25.78%
Jenkins
Original NVD Description
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)