Executive brief
Path traversal in Jenkins Git Mercurial and Repo Plugins
Affected products
- Maven org.jenkins-ci.plugins:git
- Maven org.jenkins-ci.plugins:repo
- Maven org.jenkins-ci.plugins:mercurial
Junglewise Threat Intelligence
CVE-2022-30947: Path traversal in Jenkins Git Mercurial and Repo Plugins
CVE-2022-30947 · Severity: low · CVSS 3.1 · Published 2022-05-18
Technologies: org.jenkins-ci.plugins:git (Maven), org.jenkins-ci.plugins:repo (Maven), org.jenkins-ci.plugins:mercurial (Maven). Vendors: Maven.
Related threats
- XXE vulnerability in Jenkins REPO Plugin
- Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin
- Improper masking of credentials Jenkins in Git Plugin
- Lack of authentication mechanism in Jenkins Git Plugin webhook
- Lack of authentication mechanism in Jenkins Git Plugin webhook