CVE-2022-25204

Summary

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Doktor Pluginunspecified <= 0.4.1affected
Jenkins projectJenkins Doktor Pluginnext of 0.4.1 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References