CVE-2022-29049
Assigner: jenkins
Published: 2022-04-12T00:00:00
State: PUBLISHED
affected: product: Jenkins promoted builds Plugin
vendor: Jenkins project
versions: status: unaffected
version: 3.10.1
lessThanOrEqual: 873.v6149db_d64130
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.