Skip to content
Sign in
9.8 Critical

CVE-2022-41237 Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary…

Description

Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins DotCi Plugin 2.40 earliest → 2.40.00 No fix stated

Other CVEs of Jenkins DotCi Plugin

The 3 CVEs of Jenkins DotCi Plugin →
CVE-2022-41239 Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications… 5.4 Medium CVE-2022-41238 A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger… 9.8 Critical
Track this CVE