CVE-2022-20614
Assigner: jenkins
Published: 2022-01-12T00:00:00
State: PUBLISHED
affected: product: Jenkins Mailer Plugin
vendor: Jenkins project
versions: status: unaffected
version: 1.34.2
lessThanOrEqual: 391.ve4a_38c1b_cf4b_
status: affected
version: unspecified
versionType: custom
descriptions: value: A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.