Not rated
CVE-2022-20614 A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with…
Description
A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Mailer Plugin 1.34 | earliest → < 1.34.2 | 1.34.2 |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20220112 Multiple vulnerabilities in Jenkins and Jenkins plugins www.openwall.com
- www.oracle.com www.oracle.com
Timeline
- Published
- Last modified