CVE-2025-58458 in Git Client Plugin
摘要
由 MITRE • 2025-09-03
In Jenkins Git client Plugin 6.3.2 and earlier, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.