Read the docs
TI-2022-08901 Aliases CVE-2022-25188GHSA-23h5-8ph6-7rfc

Path traversal in Jenkins Fortify Plugin

Priority LOW 22CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to write or overwrite .xml files on the Jenkins controller file system with content not controllable by the attacker.

Why it matters now

EPSS 0.01219 68th percentileScored 2026-11-07
Fix Fixed org.jenkins-ci.plugins:fortify (Maven): 20.2.35

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JenkinsJenkins Fortify Pluginup to 20.2.34—No fix listedCNA
—org.jenkins-ci.plugins:fortify (Maven)before 20.2.3520.2.35Patch availableGHSA-23h5-8ph6-7rfc
  • Jenkins Fortify Plugin VendorJenkins Affected up to 20.2.34 Fixed in — No fix listed CNA
  • org.jenkins-ci.plugins:fortify (Maven) Vendor— Affected before 20.2.35 Fixed in 20.2.35 Patch available GHSA-23h5-8ph6-7rfc

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:jenkins:fortify:*:*:*:*:*:jenkins:*:*up to 20.2.34VulnerableJenkins
  • cpe:2.3:a:jenkins:fortify:*:*:*:*:*:jenkins:*:* Versions up to 20.2.34 Vulnerable ·Jenkins

Remediation

  • Fix · GHSA-23h5-8ph6-7rfc org.jenkins-ci.plugins:fortify (Maven) Fixed in 20.2.35 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-25188
  2. 2026-10-03 Alias added: GHSA-23h5-8ph6-7rfc

References

Patch 1

Advisory 2

Other 2

  • TI-2023-03979 HTML injection vulnerability in Fortify Plugin CVSS 3.1MEDIUM 6.1
  • TI-2023-03977 CSRF vulnerability in Fortify Plugin allow capturing credentials CVSS 3.1MEDIUM 5.4
  • TI-2020-01984 Insufficiently protected credentials in Jenkins Fortify Plugin CVSS 3.1MEDIUM 4.3
  • TI-2023-03978 Missing permission checks in Fortify Plugin allow capturing credentials CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences