Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-25174 PoC — Jenkins Pipeline 操作系统命令注入漏洞

Source
Associated Vulnerability
Title:Jenkins Pipeline 操作系统命令注入漏洞 (CVE-2022-25174)
Description:Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.
Readme
# Pipeline Shared Libraries

When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts [DRY](http://en.wikipedia.org/wiki/Don't_repeat_yourself).
A very common use case is that you have many projects that are built in the similar way.

This plugin adds that functionality by allowing you to create “shared library script” SCM repositories.
It can be used in two modes:

-   A legacy mode in which there is a single Git repository hosted by Jenkins itself, to which you may push changes
-   A more general mode in which you may define libraries hosted by any SCM in a location of your choice.

Comprehensive user documentation can be found [in the Pipeline chapter of the User Handbook](https://jenkins.io/doc/book/pipeline/shared-libraries/).
File Snapshot

[4.0K] /data/pocs/215ca6b5b9f152d1e904f088ced40d0f6f2ab591 ├── [9.1K] CHANGELOG.md ├── [ 200] Jenkinsfile ├── [8.4K] pom.xml ├── [ 824] README.md └── [4.0K] src ├── [4.0K] main │   ├── [4.0K] java │   │   └── [4.0K] org │   │   └── [4.0K] jenkinsci │   │   └── [4.0K] plugins │   │   └── [4.0K] workflow │   │   ├── [4.0K] cps │   │   │   └── [4.0K] global │   │   │   ├── [3.2K] GrapeHack.java │   │   │   ├── [1.2K] GroovyShellDecoratorImpl.java │   │   │   ├── [3.5K] UserDefinedGlobalVariable.java │   │   │   ├── [1.8K] UserDefinedGlobalVariableList.java │   │   │   ├── [1.8K] UserDefinedGlobalVariableRepoListener.java │   │   │   ├── [2.9K] WorkflowLibRepository.java │   │   │   ├── [1.5K] WorkflowLibRepositoryListener.java │   │   │   └── [1.2K] WorkflowLibSshRepository.java │   │   └── [4.0K] libs │   │   ├── [2.8K] ClasspathAdder.java │   │   ├── [3.9K] FolderLibraries.java │   │   ├── [3.7K] GlobalLibraries.java │   │   ├── [2.5K] LibrariesAction.java │   │   ├── [ 16K] LibraryAdder.java │   │   ├── [1.4K] LibraryCachingCleanup.java │   │   ├── [2.9K] LibraryCachingConfiguration.java │   │   ├── [8.6K] LibraryConfiguration.java │   │   ├── [8.2K] LibraryDecorator.java │   │   ├── [1.5K] Library.java │   │   ├── [2.8K] LibraryRecord.java │   │   ├── [3.9K] LibraryResolver.java │   │   ├── [1.3K] LibraryRetrieverDescriptor.java │   │   ├── [4.4K] LibraryRetriever.java │   │   ├── [ 15K] LibraryStep.java │   │   ├── [3.8K] ResourceStep.java │   │   ├── [5.7K] SCMRetriever.java │   │   └── [ 16K] SCMSourceRetriever.java │   └── [4.0K] resources │   ├── [ 89] index.jelly │   └── [4.0K] org │   └── [4.0K] jenkinsci │   └── [4.0K] plugins │   └── [4.0K] workflow │   ├── [4.0K] cps │   │   └── [4.0K] global │   │   └── [4.0K] UserDefinedGlobalVariable │   │   └── [ 110] help.jelly │   └── [4.0K] libs │   ├── [4.0K] FolderLibraries │   │   ├── [1.6K] config.jelly │   │   └── [1.3K] config.properties │   ├── [4.0K] GlobalLibraries │   │   ├── [1.8K] config.jelly │   │   └── [1.3K] config.properties │   ├── [4.0K] LibraryCachingConfiguration │   │   ├── [1.5K] config.jelly │   │   ├── [ 104] help-excludedVersionsStr.html │   │   └── [ 153] help-refreshTimeMinutes.html │   ├── [4.0K] LibraryConfiguration │   │   ├── [2.0K] config.jelly │   │   ├── [ 236] help-allowVersionOverride.html │   │   ├── [ 94] help-cachingConfiguration.html │   │   ├── [ 169] help-defaultVersion.html │   │   ├── [ 141] help-implicit.html │   │   ├── [ 301] help-includeInChangesets.html │   │   └── [ 349] help-name.html │   ├── [4.0K] LibraryStep │   │   ├── [1.6K] config.jelly │   │   ├── [ 162] help-changelog.html │   │   ├── [ 644] help.html │   │   └── [ 198] help-identifier.html │   ├── [1.5K] Messages.properties │   ├── [4.0K] ResourceStep │   │   ├── [1.4K] config.jelly │   │   ├── [ 235] help-encoding.html │   │   ├── [ 99] help.html │   │   └── [ 126] help-resource.html │   ├── [4.0K] SCMRetriever │   │   ├── [1.5K] config.jelly │   │   ├── [1.4K] config.properties │   │   └── [ 246] help-libraryPath.html │   └── [4.0K] SCMSourceRetriever │   ├── [1.5K] config.jelly │   ├── [1.3K] config.properties │   └── [ 246] help-libraryPath.html └── [4.0K] test └── [4.0K] java └── [4.0K] org └── [4.0K] jenkinsci └── [4.0K] plugins └── [4.0K] workflow ├── [4.0K] cps │   └── [4.0K] global │   ├── [4.8K] CompilationErrorsExceptionTest.java │   ├── [ 11K] GrapeTest.java │   ├── [2.3K] UserDefinedGlobalVariableListTest.java │   ├── [2.6K] WorkflowLibRepositoryLocalTest.java │   └── [ 10K] WorkflowLibRepositoryTest.java └── [4.0K] libs ├── [ 824] FailingSCMSourceDuringFetch.java ├── [2.0K] FailingSCMSource.java ├── [ 15K] FolderLibrariesTest.java ├── [5.4K] GlobalLibrariesTest.java ├── [ 22K] LibraryAdderTest.java ├── [4.9K] LibraryCachingConfigurationTest.java ├── [3.7K] LibraryConfigurationTest.java ├── [6.9K] LibraryDecoratorTest.java ├── [4.2K] LibraryMemoryTest.java ├── [ 15K] LibraryStepTest.java ├── [ 12K] ResourceStepTest.java ├── [ 11K] RestartTest.java ├── [4.7K] SCMRetrieverTest.java └── [ 19K] SCMSourceRetrieverTest.java 36 directories, 80 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →