Skip to content
Sign in
Not rated

CVE-2022-25179 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the…

Description

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Pipeline: Multibranch Plugin 706 earliest → 706.vd43c65dec013 No fix stated
Jenkins Pipeline: Multibranch Plugin 696.698 earliest → < 696.698.v9b4218eea50f 696.698.v9b4218eea50f
Jenkins Pipeline: Multibranch Plugin 2.26 earliest → < 2.26.1 2.26.1
Jenkins Pipeline: Multibranch Plugin 2.23 earliest → < 2.23.1 2.23.1

Other CVEs of Jenkins Pipeline: Multibranch Plugin

The 3 CVEs of Jenkins Pipeline: Multibranch Plugin →
CVE-2026-92130 Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials… 3.1 Low CVE-2022-25175 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct… Not rated
Track this CVE