Aller au contenu
Se connecter
Non notée

CVE-2022-20614 A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with…

Description

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Mailer Plugin 1.34 premières → < 1.34.2 1.34.2

Autres CVE de Jenkins Mailer Plugin

Les 3 CVE de Jenkins Mailer Plugin →
CVE-2022-20613 A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows… Non notée CVE-2020-2252 Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP… Non notée
Suivre cette CVE