CVE-2022-25204: Jenkins Doktor

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.

Affected products

• Jenkins Doktor: up to and including 0.4.1

Published 2022-02-15. Last modified 2026-06-17.