CVE-2022-25175
1 advisory.
Maven/org.jenkins-ci.plugins.workflow:workflow-multibranch CVE-2022-25175: high 8.8
Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection
Action: Upgrade org.jenkins-ci.plugins.workflow:workflow-multibranch to 707.v71c3f0a_6ccdb or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 707.v71c3f0a_6ccdb | - |
Fixed versions
| 707.v71c3f0a_6ccdb |
Sources
- osv: GHSA-pj84-qjm3-77mg
- https://nvd.nist.gov/vuln/detail/CVE-2022-25175
- https://github.com/jenkinsci/workflow-multibranch-plugin/commit/71c3f0a6ccdb2ba43f43686826b0d62160df85e8
- https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463
CVE-2022-25175 · published · modified · JSON