CVE-2022-23118

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-23118

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23118.json

Aliases

• GHSA-8xjp-rp29-v5j8

Published

2022-01-12T20:15:09Z

Modified

2023-12-01T03:03:05.416398Z

Details

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.

References

• https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2546
• http://www.openwall.com/lists/oss-security/2022/01/12/6