CVE-2022-25174

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries…

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01404 · 72.3th percentile
Published
2022-02-15T16:10Z
EPSS history
Timeline
  • 15 FEB 16:10Z
    Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries…
    cvelistv5