CVE-2022-23118

CVE-2022-23118 affects the Jenkins Debian Package Builder Plugin, version 1.6.11 and earlier. The vulnerability arises because the plugin allows agents to invoke the command-line git at an attacker-specified path on the Jenkins controller, enabling attackers who control agent processes to execute...

CVE-2020-2125

The CVE-2020-2125 issue affects Jenkins Debian Package Builder Plugin versions 1.6.11 and earlier. The vulnerability is that the plugin stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master/controller, specifically ru.yandex.jenkins.plugins.debuilder.DebianPac...