Back to search
CVE-2022-20614
Published: Jan 12, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
| Vendor | Product | Versions |
|---|---|---|
Jenkins project | Jenkins Mailer Plugin | unaffected 1.34.2affected unspecified - <= 391.ve4a_38c1b_cf4b_ |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now