CVE-2022-28157

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

CVE-2022-28157

CVE-2022-28157 affects Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier. The vulnerability allows an attacker with Item/Configure permission to cause the Jenkins controller to upload arbitrary files to an attacker‑supplied FTP server, via FTP. Multiple connected sources corroborate that ...