CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Jenkins.
CVE
CVE-2025-67640
Severity
MEDIUM
CVSS
5
EPSS
0.19%
Jenkins
Original NVD Description
Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.
Related CVEs
Other vulnerabilities affecting the same vendor(s)