Skip to content
Sign in
Not rated

CVE-2022-28137 A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers…

Description

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Affected products and versions

Product Affected versions Fixed in
Jenkins JiraTestResultReporter Plugin 165 earliest → 165.v817928553942 No fix stated

Other CVEs of Jenkins JiraTestResultReporter Plugin

The 2 CVEs of Jenkins JiraTestResultReporter Plugin →
CVE-2022-28136 A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier… 8.8 High
Track this CVE