Maven/org.jenkins-ci.plugins:mercurial CVE-2022-30947: high 7.5, EPSS 1.30%

Path traversal in Jenkins Git Mercurial and Repo Plugins

Action: Upgrade org.jenkins-ci.plugins:mercurial to 2.16.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-84cm-vjwm-m979#Maven/org.jenkins-ci.plugins:mercurial
• https://nvd.nist.gov/vuln/detail/CVE-2022-30947
• https://github.com/jenkinsci/git-plugin/commit/b295606e0b865c298fde27bea14f9b7535a976e6
• https://github.com/jenkinsci/mercurial-plugin/commit/55904fbb8c9d3e0b36fc26330374904cb68e8758
• https://github.com/jenkinsci/repo-plugin/commit/3c8e6236b1088fc138a1a3e6af5ebbcb8b616f2f
• https://github.com/jenkinsci/git-plugin
• https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478
• http://www.openwall.com/lists/oss-security/2022/05/17/8

CVE-2022-30947 · published 2022-05-18T00:00:39Z · modified 2024-02-16T08:11:10.973880Z · JSON