Not rated

CVE-2022-25175 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct…

Description

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Pipeline: Multibranch Plugin 706	earliest → 706.vd43c65dec013	No fix stated
Jenkins Pipeline: Multibranch Plugin 696.698	earliest → < 696.698.v9b4218eea50f	696.698.v9b4218eea50f
Jenkins Pipeline: Multibranch Plugin 2.26	earliest → < 2.26.1	2.26.1
Jenkins Pipeline: Multibranch Plugin 2.23	earliest → < 2.23.1	2.23.1

The 3 CVEs of Jenkins Pipeline: Multibranch Plugin →

CVE-2026-92130 Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials… 3.1 Low CVE-2022-25179 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the… Not rated

Do you use Jenkins Pipeline: Multibranch Plugin?

Track this CVE Watch Jenkins Pipeline: Multibranch Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-25175

Timeline

Published February 15, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE

CVE-2022-25175 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct…

Description

Affected products and versions

Other CVEs of Jenkins Pipeline: Multibranch Plugin