CVE-2022-27201

Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:jenkins:semantic_versioning:*:*:*:*:*:jenkins:*:*
OR cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*

Information

Published : 2022-03-15 10:15

Updated : 2022-11-29 05:43


NVD link : CVE-2022-27201

Mitre link : CVE-2022-27201


JSON object : View

Advertisement

dedicated server usa

Products Affected

jenkins

  • semantic_versioning
  • jenkins