CVE-2022-25914

Remote Code Execution (RCE)

Medium · published September 8, 2022

CVSS v3.1
5.6
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01714 · 77.2th percentile
Published
2022-09-08T05:05Z
EPSS history
Timeline
  • 08 SEP 05:05Z
    Remote Code Execution (RCE)
    cvelistv5