VULNERABILITY INTELLIGENCE

CVE-2022-25204

CVSS score5.4 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2022-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references