Skip to content
Sign in
Not rated

CVE-2022-23118 Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke…

Description

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.

Affected products and versions

Product Affected versions Fixed in
Jenkins Debian Package Builder Plugin 1.6 earliest → 1.6.11 No fix stated

Other CVEs of Jenkins Debian Package Builder Plugin

The 2 CVEs of Jenkins Debian Package Builder Plugin →
CVE-2020-2125 Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration… Not rated
Track this CVE