Junglewise Threat Intelligence

CVE-2022-36889: Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment

CVE-2022-36889 · Severity: low · CVSS 3.1 · Published 2022-07-28

Technologies: org.jenkins-ci.plugins:deployer-framework (Maven). Vendors: Maven.

Executive brief

Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment

Affected products

  • Maven org.jenkins-ci.plugins:deployer-framework

Related threats