CVE-2022-28156
Assigner: jenkins
Published: 2022-03-29T12:31:21
State: PUBLISHED
affected: product: Jenkins Pipeline: Phoenix AutoTest Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 1.3
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 1.3
versionType: custom
descriptions: value: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.