Maven/org.jenkins-ci.plugins:mercurial CVE-2022-30949: low 3.7, EPSS 1.05%

Path traversal in Jenkins REPO Plugin

Action: Upgrade org.jenkins-ci.plugins:mercurial to 2.16.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-8vfc-fcr2-47pj#Maven/org.jenkins-ci.plugins:mercurial
• https://nvd.nist.gov/vuln/detail/CVE-2022-30949
• https://github.com/jenkinsci/git-plugin/commit/b295606e0b865c298fde27bea14f9b7535a976e6
• https://github.com/jenkinsci/mercurial-plugin/commit/55904fbb8c9d3e0b36fc26330374904cb68e8758
• https://github.com/jenkinsci/repo-plugin/commit/8c9cbb88baffc64d1b63183235eb86c773108235
• https://github.com/jenkinsci/repo-plugin
• https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478
• http://www.openwall.com/lists/oss-security/2022/05/17/8

CVE-2022-30949 · published 2022-05-18T00:00:40Z · modified 2024-02-16T08:10:36.096412Z · JSON