VULNERABILITY INTELLIGENCE

CVE-2022-30948

CVSS score7.5 HIGH
EPSS probability1.52%
CISA KEVNot currently listed
Published2022-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references