CVE-2022-34181
Published: 23 June 2022
Summary
CVE-2022-34181 is a critical-severity an unspecified weakness vulnerability in Jenkins Xunit. Its CVSS base score is 9.1 (Critical).
Operationally, ranked at the 47.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-5890
Vulnerability details
Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on…
more
the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.