CVE-2022-25181
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
- Record
CVE-2022-25181- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
- Record
CVE-2022-25181- Updated
- 2026-11-02
EUVDEUVD-2022-0894 No score
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
- Record
EUVD-2022-0894- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w2w-fwpf-9m4h
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration.
This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
Pipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 uses distinct checkout directories per SCM for Pipeline libraries.
- Record
GHSA-7w2w-fwpf-9m4h- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-693
- Updated
- 2026-11-02
OSV
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
- Record
CVE-2022-25181- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-7w2w-fwpf-9m4h
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration.
This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
Pipeline: Deprecated Groovy Libraries Plugin 561.va_ce0de3c2d69 uses distinct checkout directories per SCM for Pipeline libraries.
- Record
GHSA-7w2w-fwpf-9m4h- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-693
- Updated
- 2026-11-02
Show 6 moreShow less
OSVRHSA-2022:0871
Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update
- Record
RHSA-2022:0871- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1021
Red Hat Security Advisory: OpenShift Container Platform 4.9.26 security update
- Record
RHSA-2022:1021- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1025
Red Hat Security Advisory: OpenShift Container Platform 4.10.6 security update
- Record
RHSA-2022:1025- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1248
Red Hat Security Advisory: OpenShift Container Platform 4.7.48 packages and security update
- Record
RHSA-2022:1248- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1420
Red Hat Security Advisory: OpenShift Container Platform 3.11.685 security and bug fix update
- Record
RHSA-2022:1420- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1620
Red Hat Security Advisory: OpenShift Container Platform 4.6.57 packages and security update
- Record
RHSA-2022:1620- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.plugins.workflow:workflow-cps-global-libMaven |
through 552.vd9cc05b8a2e1 | 561.va_ce0de3c2d69 |
org.jenkins-ci.plugins.workflow:workflow-cps-global-libMaven |
before 561.va_ce0de3c2d69, plus listed versions 0.1-beta-50.1-beta-60.1-beta-70.1-beta-81.0 Show 45 moreShow less1.0-beta-11.11.101.10-beta-11.10.11.111.11-beta-11.11-beta-21.11-beta-31.11-beta-41.121.12-beta-11.12-beta-21.12-beta-31.131.141.14-beta-11.14.11.14.1-beta-11.14.21.151.15-beta-11.21.31.41.4.11.4.21.4.31.4.3-beta-11.51.61.6-alpha-11.71.7-alpha-11.81.91.9-beta-12.02.12.102.112.122.12.12.132.13.1 |
561.va_ce0de3c2d69 |
cri-oRed Hat:openshift:4.8::el7 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el7 | 0:1.21.5-3.rhaos4.8.gitaf64931.el7 |
cri-o-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el7 | 0:1.21.5-3.rhaos4.8.gitaf64931.el7 |
cri-oRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
cri-o-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
cri-o-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:1.21.5-3.rhaos4.8.gitaf64931.el8 | 0:1.21.5-3.rhaos4.8.gitaf64931.el8 |
jenkins-2-pluginsRed Hat:openshift:4.8::el8 From an advisory covering 15 CVEs |
before 0:4.8.1646993358-1.el8 | 0:4.8.1646993358-1.el8 |
haproxyRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
haproxy-debugsourceRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
haproxy22Red Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
haproxy22-debuginfoRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:2.2.15-4.el8 | 0:2.2.15-4.el8 |
jenkins-2-pluginsRed Hat:openshift:4.9::el8 From an advisory covering 13 CVEs |
before 0:4.9.1647580879-1.el8 | 0:4.9.1647580879-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.10::el8 From an advisory covering 12 CVEs |
before 0:4.10.1647505461-1.el8 | 0:4.10.1647505461-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.7::el8 From an advisory covering 12 CVEs |
before 0:4.7.1648800585-1.el8 | 0:4.7.1648800585-1.el8 |
jenkinsRed Hat:openshift:3.11::el7 From an advisory covering 13 CVEs |
before 0:2.319.3.1650348949-1.el7 | 0:2.319.3.1650348949-1.el7 |
jenkins-2-pluginsRed Hat:openshift:3.11::el7 From an advisory covering 13 CVEs |
before 0:3.11.1650371376-1.el7 | 0:3.11.1650371376-1.el7 |
haproxyRed Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxy-debuginfoRed Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxy20Red Hat:openshift:4.6::el7 From an advisory covering 13 CVEs |
before 0:2.0.16-3.el7 | 0:2.0.16-3.el7 |
haproxyRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy-debugsourceRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy20Red Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
haproxy20-debuginfoRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:2.0.16-5.el8 | 0:2.0.16-5.el8 |
jenkins-2-pluginsRed Hat:openshift:4.6::el8 From an advisory covering 13 CVEs |
before 0:4.6.1650364520-1.el8 | 0:4.6.1650364520-1.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-25181 is a high vulnerability (CVSS 8.8) in Jenkins Project Pipeline: Shared Groovy Libraries Plugin, published February 15, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 75th percentile. Fixed in org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 561.va_ce0de3c2d69.
References
jenkins.io/security/advisory/2022-02-15
nvd.nist.gov/vuln/detail/CVE-2022-25181
github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/ace0de3c2d691662021ea10306eeb407da6b6365
access.redhat.com/errata/RHSA-2022:0871
Show 83 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2059475
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0871.json
cve.org/CVERecord?id=CVE-2022-0811
mail-archive.com/[email protected]/msg41833.html
Left out here: 24 versions. The JSON record has them.