Security Advisory

CVE-2022-41230

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-21 15:45:51

Last updated 2025-05-28 14:44:49

Assigner jenkins

State PUBLISHED

Description

Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is configured to publish builds to, as well as builds pending for publication to those Jenkins servers.

← Browse all CVEs View on cve.org ↗