← CVE Intelligence

CVE-2022-25175

Jenkins project / Jenkins Pipeline: Multibranch Plugin PUBLISHED

Description (CNA)

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Pipeline: Multibranch Pluginunaffected 2.26.1; unaffected 2.23.1; unaffected 696.698.v9b4218eea50f; affected unspecified through 706.vd43c65dec013

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.