RHCOS 4 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0017 advisory. - http2-server: Invalid HTTP/2 requests cause DoS CVE-2022-2048 - Libraries: Untrusted users can modify some Pipeline libraries in...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-1), org.jenkins-ci.plugins.workflow:workflow-scm-step (0.1-beta-1) potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (1.51-beta-1)

org.jenkins-ci.plugins:mercurial MAVEN version 1.51-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-1 -...

org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0), org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) +3 more potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (>=2.0-alpha-1, <=2.1)

org.jenkins-ci.plugins:mercurial MAVEN version =2.0-alpha-1, =2.2.0-alpha-1, =1.1.3, =1.0.0, =1.0.2 Source cves: CVE-2022-30948 Source advisory: OSV:GHSA-5786-3QJG-MR88...

com.cloudbees.jenkins.plugins:xpdev (1.0) potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (1.41)

org.jenkins-ci.plugins:mercurial MAVEN version 1.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - com.cloudbees.jenkins.plugins:xpdev 1.0 Source cves: CVE-2022-30948 Source advisory:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.0-beta-1) potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (1.58-beta-1)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.0-beta-1 Source cves:...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.1.2) potentially affected by CVE-2022-30948 via org.jenkins-ci.plugins:mercurial (1.58)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.1.2 Source cves:...

CVE-2022-30948

creationtimestamp| type| source ---|---|--- 2022-05-17 18:27:39+00:00| seen| https://t.me/cibsecurity/42813 2025-11-09 06:55:10+00:00| seen| https://bsky.app/profile/SearchEngine.activitypub.awakari.com.ap.brid.gy/post/3m56jmjeg5hl2...

CVE-2022-30948

CVE-2022-30948 affects Jenkins Mercurial Plugin 2.16 and earlier. It allows pipelines to check out SCM repositories stored on the Jenkins controller’s file system via local-path SCM URLs, yielding limited information about other projects’ SCM contents. The issue is confirmed in multiple sources (...