CVE-2022-25175

HIGH

Jenkins Pipeline Multibranch < 706.vd43c65dec013 - Authenticated OS Command Injection via readTrusted Step

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-25175. PoCs published by shoucheng3.

AI-analyzed exploit summary This repository contains source code and documentation for the Jenkins Pipeline Multibranch plugin, specifically addressing CVE-2022-25175. The provided files include Java source code for the plugin's functionality and a README with general plugin information, but no exploit PoC or offensive techniques are present.

Description

Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.

Exploits (1)

nomisec WRITEUP
by shoucheng3 · poc
https://github.com/shoucheng3/jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013

This repository contains source code and documentation for the Jenkins Pipeline Multibranch plugin, specifically addressing CVE-2022-25175. The provided files include Java source code for the plugin's functionality and a README with general plugin information, but no exploit PoC or offensive techniques are present.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Jenkins Pipeline Multibranch Plugin
No auth needed
Prerequisites: Access to Jenkins instance with vulnerable plugin
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0042
EPSS Percentile 62.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (2)
jenkins/pipeline\ < 706.vd43c65dec013
org.jenkins-ci.plugins.workflow/workflow-multibranch 0 - 707.v71c3f0a_6ccdbMaven
Published Feb 15, 2022
Tracked Since Feb 18, 2026