7.5 High

CVE-2022-45385 A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows…

Description

A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6	earliest → 2.6.2	2.6.0.1

Do you use Jenkins CloudBees Docker Hub/Registry Notification Plugin?

Track this CVE Watch Jenkins CloudBees Docker Hub/Registry Notification Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-45385

Timeline

Published November 15, 2022
Last modified April 30, 2025

References

www.jenkins.io www.jenkins.io
[oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE