CVE-2022-25173

CVE-2022-25173

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Source: CVE-2022-25173

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다