CVE-2022-25179
Link Following in Jenkins Pipeline Multibranch Plugin
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
- Record
CVE-2022-25179- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
- Record
CVE-2022-25179- Updated
- 2026-11-02
EUVDEUVD-2022-0764 No score
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
- Record
EUVD-2022-0764- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2m9w-9xh2-wxc3
Link Following in Jenkins Pipeline Multibranch Plugin
Jenkins Pipeline: Multibranch Plugin prior to 2.23.1, 2.26.1, 696.698.v9b4218eea50f, and 707.v71c3f0a_6ccdb_ follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
- Record
GHSA-2m9w-9xh2-wxc3- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVGHSA-2m9w-9xh2-wxc3
Link Following in Jenkins Pipeline Multibranch Plugin
Jenkins Pipeline: Multibranch Plugin prior to 2.23.1, 2.26.1, 696.698.v9b4218eea50f, and 707.v71c3f0a_6ccdb_ follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
- Record
GHSA-2m9w-9xh2-wxc3- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVRHSA-2022:0871
Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update
- Record
RHSA-2022:0871- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2022:1021
Red Hat Security Advisory: OpenShift Container Platform 4.9.26 security update
- Record
RHSA-2022:1021- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1025
Red Hat Security Advisory: OpenShift Container Platform 4.10.6 security update
- Record
RHSA-2022:1025- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1248
Red Hat Security Advisory: OpenShift Container Platform 4.7.48 packages and security update
- Record
RHSA-2022:1248- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1420
Red Hat Security Advisory: OpenShift Container Platform 3.11.685 security and bug fix update
- Record
RHSA-2022:1420- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1620
Red Hat Security Advisory: OpenShift Container Platform 4.6.57 packages and security update
- Record
RHSA-2022:1620- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
2.24 up to 2.26.1 | 2.26.1 |
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
before 2.23.1 | 2.23.1 |
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
696.v52535c46f4c9 up to 696.698.v9b4218eea50f | 696.698.v9b4218eea50f |
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
706.vd43c65dec013 up to 707.v71c3f0a | 707.v71c3f0a |
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
2.24 up to 2.26.1, plus listed versions 2.252.26 |
2.26.1 |
org.jenkins-ci.plugins.workflow:workflow-multibranchMaven |
before 2.23.1, plus listed versions 1.111.11-beta-11.11-beta-21.11-beta-31.12 Show 43 moreShow less1.12-beta-11.12-beta-21.12-beta-31.131.141.14-beta-11.14.11.14.1-beta-11.14.21.151.15-beta-11.9-beta-11.9-beta-22.02.12.102.10-beta-12.112.11-beta-12.122.132.142.152.162.172.17-durability-beta-12.17-durability-beta-22.182.192.22.202.212.222.232.32.42.52.62.72.82.92.9.12.9.2 |
2.23.1 |
cri-oRed Hat:openshift:4.8::el7 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el7 | 0:1.21.5-3.rhaos4.8.gitaf64931.el7 |
cri-o-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el7 | 0:1.21.5-3.rhaos4.8.gitaf64931.el7 |
cri-oRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
cri-o-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
Show 19 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cri-o-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
jenkins-2-pluginsRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:4.8.1646993358-1.el8 | 0:4.8.1646993358-1.el8 |
haproxyRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
haproxy-debugsourceRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
haproxy22Red Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
haproxy22-debuginfoRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
jenkins-2-pluginsRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:4.9.1647580879-1.el8 | 0:4.9.1647580879-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.10::el8 From an advisory covering 12 CVEs |
before 0:4.10.1647505461-1.el8 | 0:4.10.1647505461-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.7::el8 From an advisory covering 12 CVEs |
before 0:4.7.1648800585-1.el8 | 0:4.7.1648800585-1.el8 |
jenkinsRed Hat:openshift:3.11::el7 From an advisory covering 13 CVEs |
before 0:2.319.3.1650348949-1.el7 | 0:2.319.3.1650348949-1.el7 |
jenkins-2-pluginsRed Hat:openshift:3.11::el7 From an advisory covering 13 CVEs |
before 0:3.11.1650371376-1.el7 | 0:3.11.1650371376-1.el7 |
haproxyRed Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxy-debuginfoRed Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxy20Red Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxyRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy-debugsourceRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy20Red Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy20-debuginfoRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
jenkins-2-pluginsRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:4.6.1650364520-1.el8 | 0:4.6.1650364520-1.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-25179 is a medium vulnerability (CVSS 6.5) in Jenkins Project Pipeline: Multibranch Plugin, published February 15, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. Fixed in org.jenkins-ci.plugins.workflow:workflow-multibranch 2.26.1.
References
jenkins.io/security/advisory/2022-02-15
nvd.nist.gov/vuln/detail/CVE-2022-25179
github.com/CVEProject/cvelist/blob/00bfb5abeecc9f553a2f42954ee540e493498ee9/2022/25xxx/CVE-2022-25179.json
access.redhat.com/errata/RHSA-2022:0871
Show 83 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2059475
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0871.json
cve.org/CVERecord?id=CVE-2022-0811
mail-archive.com/[email protected]/msg41833.html