multibranch

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-15	CVE-2022-25175	OS Command Injection vulnerability in Jenkins Pipeline: Multibranch Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents. network low complexity jenkins CWE-78	8.8
2022-02-15	CVE-2022-25179	Link Following vulnerability in Jenkins Pipeline: Multibranch Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system. network low complexity jenkins CWE-59	6.5