Package · Maven

org.jenkins-ci.plugins.workflow:workflow-multibranch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2022-25175 Public exploit

Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through craft…

Jenkins Project Jenkins Pipeline: Multibranch Plugin org.jenkins-ci.plugins.workflow:workflow-multibranch Web / CMS Maven

Feb 15, 2022