GitHub Advisoryadvisory · Maven

GHSA-g2pq-9jr7-w6gv Jenkins Git client Plugin file system information disclosure vulnerability

MEDIUM Published 2025-09-03 Modified 2025-11-05 Official page ↗
Aliases
CVE-2025-58458
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:git-client
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200, CWE-538
Reviewed
2025-09-03

Affected packages

• Maven org.jenkins-ci.plugins:git-client: < 6.3.3 → fixed in 6.3.3

Description

In Jenkins Git client Plugin 6.3.2 and earlier, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Related

Alias · CVE (1)

  • CVE-2025-58458 In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the… vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory weakness

References