Aller au contenu
Se connecter
Non notée

CVE-2022-25179 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the…

Description

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Pipeline: Multibranch Plugin 706 premières → 706.vd43c65dec013 Pas de correctif indiqué
Jenkins Pipeline: Multibranch Plugin 696.698 premières → < 696.698.v9b4218eea50f 696.698.v9b4218eea50f
Jenkins Pipeline: Multibranch Plugin 2.26 premières → < 2.26.1 2.26.1
Jenkins Pipeline: Multibranch Plugin 2.23 premières → < 2.23.1 2.23.1

Autres CVE de Jenkins Pipeline: Multibranch Plugin

Les 3 CVE de Jenkins Pipeline: Multibranch Plugin →
CVE-2026-92130 Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials… 3.1 Faible CVE-2022-25175 Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct… Non notée
Suivre cette CVE