Aller au contenu
Se connecter
9.8 Critique

CVE-2022-41238 A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger…

Description

A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins DotCi Plugin 2.40 premières → 2.40.00 Pas de correctif indiqué

Autres CVE de Jenkins DotCi Plugin

Les 3 CVE de Jenkins DotCi Plugin →
CVE-2022-41239 Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications… 5.4 Moyenne CVE-2022-41237 Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary… 9.8 Critique
Suivre cette CVE