CVE-2022-28157

Severity CVSS v4.0:
Pending analysis
Type:
CWE-22 Path Traversal
Publication date:
29/03/2022
Last modified:
03/11/2023

Description

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:jenkins:pipeline\:_phoenix_autotest:*:*:*:*:*:jenkins:*:* 1.3 (including)