← Database

CVE-2022-20613

MEDIUM CVSS: 4.3 Published: 2022-01-12 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Affected Platforms

Oracle Communications Cloud Native Core Automated Test SuiteJenkins Mailer

Weakness Type

CWE-352

References