Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-20617
HistoryJan 12, 2022 - 8:15 p.m.

Command injection

2022-01-1220:15:00
PRIOn knowledge base
www.prio-n.com
4

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job’s SCM repository.

CPENameOperatorVersion
docker_commonsle1.17

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%