CVE-2022-20614

Publication date

2022-01-12 00:00:00

Family

jenkins

State

PUBLISHED

Description

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.