Package · Maven

org.jenkins-ci.plugins.workflow:workflow-multibranch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2022-25175 Public exploit

Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through craft…

Jenkins Project Jenkins Pipeline: Multibranch Plugin org.jenkins-ci.plugins.workflow:workflow-multibranch Web / CMS Maven

Feb 15, 2022
Medium 6.5

CVE-2022-25179

Link Following in Jenkins Pipeline Multibranch Plugin

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permi…

Jenkins Project Jenkins Pipeline: Multibranch Plugin org.jenkins-ci.plugins.workflow:workflow-multibranch Web / CMS Maven

Feb 15, 2022