Lucene search

K
osvGoogleOSV:CVE-2022-20614
HistoryJan 12, 2022 - 8:15 p.m.

CVE-2022-20614

2022-01-1220:15:08
Google
osv.dev
8
jenkins
mailer plugin
permission check
dns
attackers
hostname

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

32.7%

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

32.7%