What’s Vulnerable › Vulnerabilities

CVE-2022-25204

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-15 · updated 2026-06-17

Description

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.

Affected products

• Jenkins project Jenkins Doktor Plugin: through 0.4.1

References

• https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2548
• https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2548

Get alerted when CVE-2022-25204 or the next vulnerability affects your stack