CVE-2022-25176 — Link Following in Project Jenkins Pipeline Groovy Plugin

CWE-59 — Link Following6 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.6%
top 29.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Project Jenkins Pipeline Groovy PluginJenkins Pipeline
Timeline
PublishedFeb 15
Latest updateFeb 16

Description

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5jenkins_project/jenkins_pipeline_groovy_pluginunspecified — 2648.va9433432b33c
▶NVDjenkins/pipeline2648.va9433432b33c

Patches

Patch: www.jenkins.io ↗Patch: www.jenkins.io ↗

🔴Vulnerability Details

3
GHSA
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin↗2022-02-16
▶
OSV
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin↗2022-02-16
▶
CVEList
CVE-2022-25176: Jenkins Pipeline: Groovy Plugin 2648↗2022-02-15
▶

📋Vendor Advisories

2
Red Hat
workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names↗2022-02-15
▶
Jenkins
Jenkins Security Advisory 2022-02-15↗2022-02-15
▶
CVE-2022-25176 — Link Following | cvebase