Aller au contenu
Se connecter
Non notée

CVE-2022-25175 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct…

Description

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Pipeline: Multibranch Plugin 706 premières → 706.vd43c65dec013 Pas de correctif indiqué
Jenkins Pipeline: Multibranch Plugin 696.698 premières → < 696.698.v9b4218eea50f 696.698.v9b4218eea50f
Jenkins Pipeline: Multibranch Plugin 2.26 premières → < 2.26.1 2.26.1
Jenkins Pipeline: Multibranch Plugin 2.23 premières → < 2.23.1 2.23.1

Autres CVE de Jenkins Pipeline: Multibranch Plugin

Les 3 CVE de Jenkins Pipeline: Multibranch Plugin →
CVE-2026-92130 Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials… 3.1 Faible CVE-2022-25179 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the… Non notée
Suivre cette CVE