Skip to content
Sign in
Not rated

CVE-2022-30949 Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories…

Description

Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.

Affected products and versions

Product Affected versions Fixed in
Jenkins REPO Plugin 1.14 earliest → 1.14.0 No fix stated

Other CVEs of Jenkins REPO Plugin

The 2 CVEs of Jenkins REPO Plugin →
CVE-2022-43415 Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks 7.5 High
Track this CVE