Every CVE Search/ Get API key

CVE-2022-25173

Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

8.8 HighPublic exploitFix available

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.44%Up 0.6 points since Feb 16, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
CVE-2022-25173
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
CVE-2022-25173
Updated
2026-11-02
EUVDEUVD-2022-0815 No score

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
EUVD-2022-0815
Updated
2026-11-03
GitHub AdvisoriesGHSA-4m7p-55jm-3vwv 8.8

Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

Jenkins Pipeline: Groovy Plugin prior to 2656.vf7a_e7b_75a_457, 2.94.1, and 2.92.1 uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
GHSA-4m7p-55jm-3vwv
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSV 8.8

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
CVE-2022-25173
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-4m7p-55jm-3vwv 8.8

Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

Jenkins Pipeline: Groovy Plugin prior to 2656.vf7a_e7b_75a_457, 2.94.1, and 2.92.1 uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Record
GHSA-4m7p-55jm-3vwv
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2022:0871 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update

Record
RHSA-2022:0871
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1021 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.9.26 security update

Record
RHSA-2022:1021
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1025 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.10.6 security update

Record
RHSA-2022:1025
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1248 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.7.48 packages and security update

Record
RHSA-2022:1248
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1420 8.8

Red Hat Security Advisory: OpenShift Container Platform 3.11.685 security and bug fix update

Record
RHSA-2022:1420
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1620 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.6.57 packages and security update

Record
RHSA-2022:1620
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 2646.v6ed3b5b01ff1 up to 2656.vf7a
2656.vf7a
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 2.93 up to 2.94.1
2.94.1
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 before 2.92.1
2.92.1
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 2646.v6ed3b5b01ff1 up to 2656.vf7a, plus listed versions
2648.2651.v230593e03e9f2648.va9433432b33c
2656.vf7a
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 2.93 up to 2.94.1, plus listed versions
2.94
2.94.1
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 before 2.92.1, plus listed versions
0.1-beta-10.1-beta-20.1-beta-30.1-beta-40.1-beta-5
Show 45 moreShow less
0.1-beta-60.1-beta-70.1-beta-81.01.0-beta-11.11.101.10-beta-11.10.11.111.11-beta-11.11-beta-21.11-beta-31.11-beta-41.121.12-beta-11.12-beta-21.12-beta-31.131.141.14-beta-11.14.11.14.1-beta-11.14.21.151.15-beta-11.21.31.41.4.11.4.21.4.31.4.3-beta-11.51.61.6-alpha-11.71.7-alpha-11.81.91.9-beta-12.02.12.102.11
2.92.1
cri-o
Red Hat:openshift:4.8::el7
From an advisory covering 15 CVEs
 before 0:1.21.5-3.rhaos4.8.gitaf64931.el7
0:1.21.5-3.rhaos4.8.gitaf64931.el7
cri-o-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 15 CVEs
 before 0:1.21.5-3.rhaos4.8.gitaf64931.el7
0:1.21.5-3.rhaos4.8.gitaf64931.el7
cri-o
Red Hat:openshift:4.8::el8
From an advisory covering 15 CVEs
 before 0:1.21.5-3.rhaos4.8.gitaf64931.el8
0:1.21.5-3.rhaos4.8.gitaf64931.el8
cri-o-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 15 CVEs
 before 0:1.21.5-3.rhaos4.8.gitaf64931.el8
0:1.21.5-3.rhaos4.8.gitaf64931.el8
Show 19 moreShow less
Affected packages
PackageAffectedFixed
cri-o-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 15 CVEs
 before 0:1.21.5-3.rhaos4.8.gitaf64931.el8
0:1.21.5-3.rhaos4.8.gitaf64931.el8
jenkins-2-plugins
Red Hat:openshift:4.8::el8
From an advisory covering 15 CVEs
 before 0:4.8.1646993358-1.el8
0:4.8.1646993358-1.el8
haproxy
Red Hat:openshift:4.9::el8
From an advisory covering 13 CVEs
 before 0:2.2.15-4.el8
0:2.2.15-4.el8
haproxy-debugsource
Red Hat:openshift:4.9::el8
From an advisory covering 13 CVEs
 before 0:2.2.15-4.el8
0:2.2.15-4.el8
haproxy22
Red Hat:openshift:4.9::el8
From an advisory covering 13 CVEs
 before 0:2.2.15-4.el8
0:2.2.15-4.el8
haproxy22-debuginfo
Red Hat:openshift:4.9::el8
From an advisory covering 13 CVEs
 before 0:2.2.15-4.el8
0:2.2.15-4.el8
jenkins-2-plugins
Red Hat:openshift:4.9::el8
From an advisory covering 13 CVEs
 before 0:4.9.1647580879-1.el8
0:4.9.1647580879-1.el8
jenkins-2-plugins
Red Hat:openshift:4.10::el8
From an advisory covering 12 CVEs
 before 0:4.10.1647505461-1.el8
0:4.10.1647505461-1.el8
jenkins-2-plugins
Red Hat:openshift:4.7::el8
From an advisory covering 12 CVEs
 before 0:4.7.1648800585-1.el8
0:4.7.1648800585-1.el8
jenkins
Red Hat:openshift:3.11::el7
From an advisory covering 13 CVEs
 before 0:2.319.3.1650348949-1.el7
0:2.319.3.1650348949-1.el7
jenkins-2-plugins
Red Hat:openshift:3.11::el7
From an advisory covering 13 CVEs
 before 0:3.11.1650371376-1.el7
0:3.11.1650371376-1.el7
haproxy
Red Hat:openshift:4.6::el7
From an advisory covering 13 CVEs
 before 0:2.0.16-3.el7
0:2.0.16-3.el7
haproxy-debuginfo
Red Hat:openshift:4.6::el7
From an advisory covering 13 CVEs
 before 0:2.0.16-3.el7
0:2.0.16-3.el7
haproxy20
Red Hat:openshift:4.6::el7
From an advisory covering 13 CVEs
 before 0:2.0.16-3.el7
0:2.0.16-3.el7
haproxy
Red Hat:openshift:4.6::el8
From an advisory covering 13 CVEs
 before 0:2.0.16-5.el8
0:2.0.16-5.el8
haproxy-debugsource
Red Hat:openshift:4.6::el8
From an advisory covering 13 CVEs
 before 0:2.0.16-5.el8
0:2.0.16-5.el8
haproxy20
Red Hat:openshift:4.6::el8
From an advisory covering 13 CVEs
 before 0:2.0.16-5.el8
0:2.0.16-5.el8
haproxy20-debuginfo
Red Hat:openshift:4.6::el8
From an advisory covering 13 CVEs
 before 0:2.0.16-5.el8
0:2.0.16-5.el8
jenkins-2-plugins
Red Hat:openshift:4.6::el8
From an advisory covering 13 CVEs
 before 0:4.6.1650364520-1.el8
0:4.6.1650364520-1.el8

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubshoucheng3/jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646-v6ed3b5b01ff12025-08-17

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-25173 is a high vulnerability (CVSS 8.8) in Jenkins Project Pipeline: Groovy Plugin, published February 15, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. Fixed in org.jenkins-ci.plugins.workflow:workflow-cps 2656.vf7a.

References

Show 85 moreShow less
This page doesn't list everything

Left out here: 110 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open