CVE-2022-30948

Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's…

published May 17, 2022

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01521 · 74.4th percentile
Published
2022-05-17T14:06Z
EPSS history
Timeline
  • 17 MAY 14:06Z
    Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's…
    cvelistv5