CVE-2022-25178

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step…

published February 15, 2022

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01668 · 76.6th percentile
Published
2022-02-15T16:10Z
EPSS history
Timeline
  • 15 FEB 16:10Z
    Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step…
    cvelistv5