The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input...
9.8CVSS0.01341EPSS
SaveExploits0References3
OSV•added 2022/09/08 5:5 a.m.•15 views
CVE-2022-25914 Remote Code Execution (RCE)
The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input...