CVE-2022-28137
Assigner: jenkins
Published: 2022-03-29T12:30:50
State: PUBLISHED
affected: product: Jenkins JiraTestResultReporter Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 165.v817928553942
status: affected
version: unspecified
versionType: custom
descriptions: value: A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.