CVE-2022-25204

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists...

CVE-2022-25204

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists...

CVE-2022-25204

CVE-2022-25204 affects Jenkins Doktor Plugin (versions 0.4.1 and earlier). The vulnerability arises from the plugin’s ability to render agent-controlled files on the Jenkins controller as Markdown or Asciidoc, coupled with error messages that can let an attacker who controls agent processes deter...