← Database

CVE-2022-41238

CRITICAL CVSS: 9.8 Published: 2022-09-21 Modified: 2026-06-17

Description

A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.

Affected Platforms

Jenkins Dotci

Weakness Type

CWE-862, CWE-862

References