CVE-2022-25188

Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with…

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to write or overwrite .xml files on the Jenkins controller file system with content not controllable by the attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01219 · 68.4th percentile
Published
2022-02-15T16:11Z
EPSS history
Timeline
  • 15 FEB 16:11Z
    Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with…
    cvelistv5