GitHub Advisoryadvisory · Maven

GHSA-4m7p-55jm-3vwv Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

HIGH Published 2022-02-16 Modified 2023-05-25 Official page ↗
Aliases
CVE-2022-25173
Ecosystem
Maven
Packages
org.jenkins-ci.plugins.workflow:workflow-cps
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2022-06-20

Affected packages

• Maven org.jenkins-ci.plugins.workflow:workflow-cps: >= 2646.v6ed3b5b01ff1, < 2656.vf7a → fixed in 2656.vf7a • Maven org.jenkins-ci.plugins.workflow:workflow-cps: >= 2.93, < 2.94.1 → fixed in 2.94.1 • Maven org.jenkins-ci.plugins.workflow:workflow-cps: < 2.92.1 → fixed in 2.92.1

Description

Jenkins Pipeline: Groovy Plugin prior to 2656.vf7a_e7b_75a_457, 2.94.1, and 2.92.1 uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Related

Alias · CVE (1)

  • CVE-2022-25173 Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script… vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References