CVE-2022-23118: vulnerability in Jenkins Debian Package Builder Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Debian Package Builder Plugin+ Monitor ru.yandex.jenkins.plugins.debuilder:debian-package-builder
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.
Affected products
Jenkins project · Jenkins Debian Package Builder PluginRelated CVEs — Jenkins Debian Package Builder Plugin
In the same product, most dangerous first.