Vulnerability-Lookup

CVE-2022-25181 (GCVE-0-2022-25181)

Vulnerability from cvelistv5 – Published: 2022-02-15 16:11 – Updated: 2024-08-03 04:36

Summary

A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

jenkins mitre root

References

1 reference

URL	Tags
https://www.jenkins.io/security/advisory/2022-02-…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version	CPE status
Jenkins project	Jenkins Pipeline: Shared Groovy Libraries Plugin	Affected: unspecified , ≤ 552.vd9cc05b8a2e1 (custom) Unaffected: 2.21.1 Unaffected: 2.18.1	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:36:05.788Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Jenkins Pipeline: Shared Groovy Libraries Plugin",
          "vendor": "Jenkins project",
          "versions": [
            {
              "lessThanOrEqual": "552.vd9cc05b8a2e1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.21.1"
            },
            {
              "status": "unaffected",
              "version": "2.18.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T14:19:39.233Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "jenkinsci-cert@googlegroups.com",
          "ID": "CVE-2022-25181",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Jenkins Pipeline: Shared Groovy Libraries Plugin",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_value": "552.vd9cc05b8a2e1"
                          },
                          {
                            "version_affected": "!",
                            "version_value": "2.21.1"
                          },
                          {
                            "version_affected": "!",
                            "version_value": "2.18.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Jenkins project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-693: Protection Mechanism Failure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
              "refsource": "CONFIRM",
              "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2022-25181",
    "datePublished": "2022-02-15T16:11:03.000Z",
    "dateReserved": "2022-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:36:05.788Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-25181",
      "date": "2026-09-18",
      "epss": "0.01601",
      "percentile": "0.7468"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:jenkins:pipeline\\:shared_groovy_libraries:*:*:*:*:*:jenkins:*:*",
                  "matchCriteriaId": "7710DFDC-CED2-46CA-A221-8F025DF48358",
                  "versionEndIncluding": "552.vd9cc05b8a2e1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
        },
        {
          "lang": "es",
          "value": "Una vulnerabilidad de omisi\u00f3n de sandbox en Jenkins Pipeline: Shared Groovy Libraries Plugin versiones 552.vd9cc05b8a2e1 y anteriores, permite a atacantes con permiso Item/Configure ejecutar c\u00f3digo arbitrario en el contexto de la JVM del controlador Jenkins mediante contenidos SCM dise\u00f1ados especialmente, si ya se presenta una biblioteca global de Pipeline"
        }
      ],
      "id": "CVE-2022-25181",
      "lastModified": "2024-11-21T06:51:45.790",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 6.5,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 8.0,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 2.8,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-02-15T17:15:09.047",
      "references": [
        {
          "source": "jenkinsci-cert@googlegroups.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
        }
      ],
      "sourceIdentifier": "jenkinsci-cert@googlegroups.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-noinfo"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "Jenkins Pipeline: Shared Groovy Libraries Plugin",
                "vendor": "Jenkins project",
                "versions": [
                  {
                    "lessThanOrEqual": "552.vd9cc05b8a2e1",
                    "status": "affected",
                    "version": "unspecified",
                    "versionType": "custom"
                  },
                  {
                    "status": "unaffected",
                    "version": "2.21.1"
                  },
                  {
                    "status": "unaffected",
                    "version": "2.18.1"
                  }
                ]
              }
            ],
            "source": "jenkinsci-cert@googlegroups.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:jenkins:pipeline\\:shared_groovy_libraries:*:*:*:*:*:jenkins:*:*",
                    "matchCriteriaId": "7710DFDC-CED2-46CA-A221-8F025DF48358",
                    "versionEndIncluding": "552.vd9cc05b8a2e1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de omisi\u00f3n de sandbox en Jenkins Pipeline: Shared Groovy Libraries Plugin versiones 552.vd9cc05b8a2e1 y anteriores, permite a atacantes con permiso Item/Configure ejecutar c\u00f3digo arbitrario en el contexto de la JVM del controlador Jenkins mediante contenidos SCM dise\u00f1ados especialmente, si ya se presenta una biblioteca global de Pipeline"
          }
        ],
        "id": "CVE-2022-25181",
        "lastModified": "2026-06-17T04:33:09.750",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2022-02-15T17:15:09.047",
        "references": [
          {
            "source": "jenkinsci-cert@googlegroups.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
          }
        ],
        "sourceIdentifier": "jenkinsci-cert@googlegroups.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T15:51:51+00:00",
      "cve": "CVE-2022-25181",
      "id": "CVE-2022-25181",
      "initial_release_date": "2022-02-15T00:00:00+00:00",
      "product_status:fixed": "12",
      "product_status:known_not_affected": "219",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "workflow-cps-global-lib: Sandbox bypass vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-25181.json",
      "version": "3"
    }
  }
}

CNVD-2022-16725

Vulnerability from cnvd - Published: 2022-03-04

Title

Jenkins Pipeline Shared Groovy Libraries Plugin沙箱绕过漏洞

Description

Jenkins是Jenkins开源的一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。 Jenkins Pipeline Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1及更早版本存在沙箱绕过漏洞，该漏洞源于该插件使用相同的工作区目录来检出所有具有相同名称的Pipeline库，而不管使用的SCM和库配置的来源如何。攻击者可利用该漏洞在Jenkins控制器JVM上下文中通过精编的SCM内容执行任意代码。

Severity

中

Patch Name

Jenkins Pipeline Shared Groovy Libraries Plugin沙箱绕过漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441

Reference

https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441

Impacted products

Name
Jenkins Pipeline Shared Groovy Libraries Plugin <=552.vd9cc05b8a2e1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-25181",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-25181"
    }
  },
  "description": "Jenkins\u662fJenkins\u5f00\u6e90\u7684\u4e00\u4e2a\u5e94\u7528\u8f6f\u4ef6\u3002\u4e00\u4e2a\u5f00\u6e90\u81ea\u52a8\u5316\u670d\u52a1\u5668Jenkins\u63d0\u4f9b\u4e86\u6570\u767e\u4e2a\u63d2\u4ef6\u6765\u652f\u6301\u6784\u5efa\uff0c\u90e8\u7f72\u548c\u81ea\u52a8\u5316\u4efb\u4f55\u9879\u76ee\u3002\n\nJenkins Pipeline Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1\u53ca\u66f4\u65e9\u7248\u672c\u5b58\u5728\u6c99\u7bb1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8be5\u63d2\u4ef6\u4f7f\u7528\u76f8\u540c\u7684\u5de5\u4f5c\u533a\u76ee\u5f55\u6765\u68c0\u51fa\u6240\u6709\u5177\u6709\u76f8\u540c\u540d\u79f0\u7684Pipeline\u5e93\uff0c\u800c\u4e0d\u7ba1\u4f7f\u7528\u7684SCM\u548c\u5e93\u914d\u7f6e\u7684\u6765\u6e90\u5982\u4f55\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728Jenkins\u63a7\u5236\u5668JVM\u4e0a\u4e0b\u6587\u4e2d\u901a\u8fc7\u7cbe\u7f16\u7684SCM\u5185\u5bb9\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-16725",
  "openTime": "2022-03-04",
  "patchDescription": "Jenkins\u662fJenkins\u5f00\u6e90\u7684\u4e00\u4e2a\u5e94\u7528\u8f6f\u4ef6\u3002\u4e00\u4e2a\u5f00\u6e90\u81ea\u52a8\u5316\u670d\u52a1\u5668Jenkins\u63d0\u4f9b\u4e86\u6570\u767e\u4e2a\u63d2\u4ef6\u6765\u652f\u6301\u6784\u5efa\uff0c\u90e8\u7f72\u548c\u81ea\u52a8\u5316\u4efb\u4f55\u9879\u76ee\u3002\r\n\r\nJenkins Pipeline Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1\u53ca\u66f4\u65e9\u7248\u672c\u5b58\u5728\u6c99\u7bb1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8be5\u63d2\u4ef6\u4f7f\u7528\u76f8\u540c\u7684\u5de5\u4f5c\u533a\u76ee\u5f55\u6765\u68c0\u51fa\u6240\u6709\u5177\u6709\u76f8\u540c\u540d\u79f0\u7684Pipeline\u5e93\uff0c\u800c\u4e0d\u7ba1\u4f7f\u7528\u7684SCM\u548c\u5e93\u914d\u7f6e\u7684\u6765\u6e90\u5982\u4f55\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728Jenkins\u63a7\u5236\u5668JVM\u4e0a\u4e0b\u6587\u4e2d\u901a\u8fc7\u7cbe\u7f16\u7684SCM\u5185\u5bb9\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Jenkins Pipeline Shared Groovy Libraries Plugin\u6c99\u7bb1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Jenkins Pipeline Shared Groovy Libraries Plugin \u003c=552.vd9cc05b8a2e1"
  },
  "referenceLink": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
  "serverity": "\u4e2d",
  "submitTime": "2022-02-17",
  "title": "Jenkins Pipeline Shared Groovy Libraries Plugin\u6c99\u7bb1\u7ed5\u8fc7\u6f0f\u6d1e"
}

FKIE_CVE-2022-25181

Vulnerability from fkie_nvd - Published: 2022-02-15 17:15 - Updated: 2026-06-17 04:33

Severity

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	jenkinsci-cert@googlegroups.com	https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441	Patch, Vendor Advisory

Impacted products

	Vendor	Product	Version
	jenkins	pipeline\	shared_groovy_libraries

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Jenkins Pipeline: Shared Groovy Libraries Plugin",
          "vendor": "Jenkins project",
          "versions": [
            {
              "lessThanOrEqual": "552.vd9cc05b8a2e1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2.21.1"
            },
            {
              "status": "unaffected",
              "version": "2.18.1"
            }
          ]
        }
      ],
      "source": "jenkinsci-cert@googlegroups.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jenkins:pipeline\\:shared_groovy_libraries:*:*:*:*:*:jenkins:*:*",
              "matchCriteriaId": "7710DFDC-CED2-46CA-A221-8F025DF48358",
              "versionEndIncluding": "552.vd9cc05b8a2e1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de omisi\u00f3n de sandbox en Jenkins Pipeline: Shared Groovy Libraries Plugin versiones 552.vd9cc05b8a2e1 y anteriores, permite a atacantes con permiso Item/Configure ejecutar c\u00f3digo arbitrario en el contexto de la JVM del controlador Jenkins mediante contenidos SCM dise\u00f1ados especialmente, si ya se presenta una biblioteca global de Pipeline"
    }
  ],
  "id": "CVE-2022-25181",
  "lastModified": "2026-06-17T04:33:09.750",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-02-15T17:15:09.047",
  "references": [
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
    }
  ],
  "sourceIdentifier": "jenkinsci-cert@googlegroups.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-7W2W-FWPF-9M4H

Vulnerability from github – Published: 2022-02-16 00:01 – Updated: 2023-10-27 19:10

Summary

Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure

Details

Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration.

This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.

Pipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 uses distinct checkout directories per SCM for Pipeline libraries.

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 552.vd9cc05b8a2e1"
      },
      "package": {
        "ecosystem": "Maven",
        "name": "org.jenkins-ci.plugins.workflow:workflow-cps-global-lib"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "561.va_ce0de3c2d69"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-25181"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-693"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-20T22:39:16Z",
    "nvd_published_at": "2022-02-15T17:15:00Z",
    "severity": "HIGH"
  },
  "details": "Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration.\n\nThis allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.\n\nPipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 uses distinct checkout directories per SCM for Pipeline libraries.",
  "id": "GHSA-7w2w-fwpf-9m4h",
  "modified": "2023-10-27T19:10:33Z",
  "published": "2022-02-16T00:01:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25181"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/ace0de3c2d691662021ea10306eeb407da6b6365"
    },
    {
      "type": "WEB",
      "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure"
}

GSD-2022-25181

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-25181

Aliases

CVE-2022-25181

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-25181",
    "description": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.",
    "id": "GSD-2022-25181",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:1021",
      "https://access.redhat.com/errata/RHSA-2022:1025",
      "https://access.redhat.com/errata/RHSA-2022:1248",
      "https://access.redhat.com/errata/RHSA-2022:1420",
      "https://access.redhat.com/errata/RHSA-2022:1620",
      "https://access.redhat.com/errata/RHSA-2022:0871"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-25181"
      ],
      "details": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.",
      "id": "GSD-2022-25181",
      "modified": "2023-12-13T01:19:26.993394Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "jenkinsci-cert@googlegroups.com",
        "ID": "CVE-2022-25181",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Jenkins Pipeline: Shared Groovy Libraries Plugin",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "versions": [
                              {
                                "lessThanOrEqual": "552.vd9cc05b8a2e1",
                                "status": "affected",
                                "version": "unspecified",
                                "versionType": "custom"
                              },
                              {
                                "status": "unaffected",
                                "version": "2.21.1"
                              },
                              {
                                "status": "unaffected",
                                "version": "2.18.1"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Jenkins project"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
            "refsource": "MISC",
            "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "(,552.vd9cc05b8a2e1]",
          "affected_versions": "All versions up to 552.vd9cc05b8a2e1",
          "cvss_v2": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-06-20",
          "description": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.",
          "fixed_versions": [
            "561.va_ce0de3c2d69"
          ],
          "identifier": "CVE-2022-25181",
          "identifiers": [
            "GHSA-7w2w-fwpf-9m4h",
            "CVE-2022-25181"
          ],
          "not_impacted": "All versions after 552.vd9cc05b8a2e1",
          "package_slug": "maven/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib",
          "pubdate": "2022-02-16",
          "solution": "Upgrade to version 561.va_ce0de3c2d69 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-25181",
            "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
            "https://github.com/advisories/GHSA-7w2w-fwpf-9m4h"
          ],
          "uuid": "cfd419ee-33b5-46dd-b357-8a38e4746051"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:jenkins:pipeline\\:shared_groovy_libraries:*:*:*:*:*:jenkins:*:*",
                "cpe_name": [],
                "versionEndIncluding": "552.vd9cc05b8a2e1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "jenkinsci-cert@googlegroups.com",
          "ID": "CVE-2022-25181"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2441"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-11-30T18:59Z",
      "publishedDate": "2022-02-15T17:15Z"
    }
  }
}

RHSA-2022:0871

Vulnerability from csaf_redhat - Published: 2022-03-22 17:31 - Updated: 2026-03-21 04:24

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update

Severity

Important

Scope

15 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

A flaw was found in Jenkins. The Pipeline: Shared Groovy Libraries Plugin uses the same workspace directory for all checkouts of Pipeline libraries with the same name, regardless of the SCM used and the source of the library configuration. This flaw allows attackers with item/configure permission to execute arbitrary code in the context of the Jenkins controller, JVM, through crafted SCM contents if a global Pipeline library already exists.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known not affected: 22 products

https://access.redhat.com/errata/RHSA-2022:0871

Open the full advisory

RHSA-2022:1021

Vulnerability from csaf_redhat - Published: 2022-03-29 07:05 - Updated: 2026-03-21 04:24

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.9.26 security update

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known not affected: 54 products

https://access.redhat.com/errata/RHSA-2022:1021

Open the full advisory

RHSA-2022:1025

Vulnerability from csaf_redhat - Published: 2022-03-28 11:56 - Updated: 2026-03-21 04:24

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.10.6 security update

Severity

Important

Scope

12 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known not affected: 29 products

https://access.redhat.com/errata/RHSA-2022:1025

Open the full advisory

RHSA-2022:1248

Vulnerability from csaf_redhat - Published: 2022-04-13 13:49 - Updated: 2026-03-21 04:24

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.7.48 packages and security update

Severity

Important

Scope

12 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products

https://access.redhat.com/errata/RHSA-2022:1248

Open the full advisory

RHSA-2022:1420

Vulnerability from csaf_redhat - Published: 2022-04-27 07:44 - Updated: 2026-08-04 21:36

Summary

Red Hat Security Advisory: OpenShift Container Platform 3.11.685 security and bug fix update

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known not affected: 80 products

https://access.redhat.com/errata/RHSA-2022:1420

Open the full advisory

RHSA-2022:1620

Vulnerability from csaf_redhat - Published: 2022-05-04 18:22 - Updated: 2026-03-21 04:24

Summary

Red Hat Security Advisory: OpenShift Container Platform 4.6.57 packages and security update

Severity

Important

Scope

13 vulnerabilities in this advisory, including CVE-2022-25181.

CVE-2022-25181

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known not affected: 34 products

https://access.redhat.com/errata/RHSA-2022:1620

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-25181 (GCVE-0-2022-25181)

Tags

Sightings

Nomenclature

Related by attack behaviour