VULNERABILITY INTELLIGENCE

CVE-2022-30949

CVSS score5.3 MEDIUM
EPSS probability1.05%
CISA KEVNot currently listed
Published2022-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references