CVE-2022-25180
1 advisory.
Maven/org.jenkins-ci.plugins.workflow:workflow-cps CVE-2022-25180: medium 4.3
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
Action: Upgrade org.jenkins-ci.plugins.workflow:workflow-cps to 2656.vf7a_e7b_75a_457 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2656.vf7a_e7b_75a_457 | - |
Fixed versions
| 2656.vf7a_e7b_75a_457 |
Sources
- osv: GHSA-qv6q-x9vr-w7j3
- https://nvd.nist.gov/vuln/detail/CVE-2022-25180
- https://github.com/jenkinsci/workflow-cps-plugin/commit/886676efdd711e126307ec70a539f2fe613151f9
- https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2443
CVE-2022-25180 · published · modified · JSON