Skip to content
Sign in
Not rated

CVE-2022-29049 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of…

Description

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.

Affected products and versions

Product Affected versions Fixed in
Jenkins promoted builds Plugin 3.10 earliest → < 3.10.1 3.10.1

Other CVEs of Jenkins promoted builds Plugin

The 3 CVEs of Jenkins promoted builds Plugin →
CVE-2022-29045 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description… Not rated CVE-2021-21641 A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers… Not rated
Track this CVE