VULNERABILITY INTELLIGENCE

CVE-2022-23118

CVSS score9 HIGH

EPSS probability1.60%

CISA KEVNot currently listed

Published2022-01-12

Last modified2026-06-17

Description

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.