Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-25174
HistoryFeb 15, 2022 - 5:15 p.m.

Design/Logic Flaw

2022-02-1517:15:00
PRIOn knowledge base
www.prio-n.com
7

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%