cve/2022/CVE-2022-23118.md
2024-05-25 21:48:12 +02:00

815 B

CVE-2022-23118

Description

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.

POC

Reference

No PoCs from references.

Github