CVE-2022-36894: Jenkins Clif Performance Testing

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.

Affected products

• Jenkins Clif Performance Testing: up to and including 64.vc0d66de1dfb_f

Published 2022-07-27. Last modified 2026-06-17.