CVE-2022-25173

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically…

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01444 · 73.0th percentile
Published
2022-02-15T16:10Z
EPSS history
Timeline
  • 15 FEB 16:10Z
    Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically…
    cvelistv5