Jenkins Project Jenkins Debian Package Builder Plugin
2 CVEs affecting Jenkins Project Jenkins Debian Package Builder Plugin. Latest disclosed: 2022-01-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23118 | High | 8.8 | 2022-01-12 | Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path… |
CVE-2020-2125 | Medium | 4.3 | 2020-02-12 | Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it ca… |