CVE-2022-30948 | BDVDB-2026-176374 Detail

Jenkins projectJenkins Mercurial Plugin

Description#

Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478
http://www.openwall.com/lists/oss-security/2022/05/17/8

Exploit#

No public exploit known

History#

Version 12022-05-17Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.