Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8
CVE-2022-25175
- EPSS 3.13%
- Published 15.02.2022 17:15:08
- Last modified 21.11.2024 06:51:45
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller thro...
6.5
CVE-2022-25179
- EPSS 1.57%
- Published 15.02.2022 17:15:08
- Last modified 21.11.2024 06:51:45
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipeli...
1