CVE-2022-28157

MEDIUM · CVSS 6.5 EPSS 1.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-28157

Severity

MEDIUM

CVSS

6.5

EPSS

1.41%

Jenkins

Original NVD Description

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.