Vulnerability Details CVE-2022-25914
The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 88.3%
CVSS Severity
CVSS v3 Score 5.6
Products affected by CVE-2022-25914
-
cpe:2.3:a:jib_project:jib:0.1.0
-
cpe:2.3:a:jib_project:jib:0.1.1
-
cpe:2.3:a:jib_project:jib:0.1.2
-
cpe:2.3:a:jib_project:jib:0.1.3
-
cpe:2.3:a:jib_project:jib:0.1.4
-
cpe:2.3:a:jib_project:jib:0.1.5
-
cpe:2.3:a:jib_project:jib:0.1.6
-
cpe:2.3:a:jib_project:jib:0.1.7
-
cpe:2.3:a:jib_project:jib:0.10.0
-
cpe:2.3:a:jib_project:jib:0.10.1
-
cpe:2.3:a:jib_project:jib:0.11.0
-
cpe:2.3:a:jib_project:jib:0.12.0
-
cpe:2.3:a:jib_project:jib:0.13.0
-
cpe:2.3:a:jib_project:jib:0.13.1
-
cpe:2.3:a:jib_project:jib:0.14.0
-
cpe:2.3:a:jib_project:jib:0.15.0
-
cpe:2.3:a:jib_project:jib:0.16.0
-
cpe:2.3:a:jib_project:jib:0.17.0
-
cpe:2.3:a:jib_project:jib:0.18.0
-
cpe:2.3:a:jib_project:jib:0.19.0
-
cpe:2.3:a:jib_project:jib:0.20.0
-
cpe:2.3:a:jib_project:jib:0.21.0
-
cpe:2.3:a:jib_project:jib:0.9.0
-
cpe:2.3:a:jib_project:jib:0.9.1