CVE-2022-23118

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path…

published January 12, 2022

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01603 · 75.6th percentile
Published
2022-01-12T19:06Z
EPSS history
Timeline
  • 12 JAN 19:06Z
    Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path…
    cvelistv5