org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-3) +1 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +8 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.13)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =2.0, =1.4, =1.12.1, =2.2,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1-beta-1) +1 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1-beta...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12) +1 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9-beta-1) +1 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9-beta-1 -...

org.jenkins-ci.plugins:gerrit-code-review (>=0.2, <=0.7.0) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.14.2)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:gerrit-code-review =0.2, =0.7.0...

org.jenkins-ci.plugins:github-organization-folder (>=1.6-beta-1, <=1.6-beta-2) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +5 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.0)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.1), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +2 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.9)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1,...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1,...

io.jenkins.blueocean:blueocean (>=1.0.0-rc1, <=1.1.7), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-rc1, <=1.0.1) +7 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.14)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-rc1, =1.0.0-rc1,...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +5 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.15)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 -...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.0) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean-pipeline-editor (>=0.1-preview-1, <=1.0-alpha-4) +12 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.9.2)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - com.testinium.jenkins:testinium 1.0 -...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-3, <=1.2.4), io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.2.0-beta-3, <=1.3.6) +2 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.16)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-...

Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses distinct checkout directories per SCM for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents...

GHSA-PJ84-QJM3-77MG Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses distinct checkout directories per SCM for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents...

org.jenkins-ci.plugins:github-organization-folder (>=1.1, <=1.2) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.1,...

org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.3)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.3,...