CVE-2022-43417

Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...

CVE-2022-43417

CVE-2022-43417 affects Jenkins Katalon Plugin 1.0.32 and earlier. The issue is missing permission checks in several HTTP endpoints, enabling attackers with Overall/Read to connect to an attacker‑specified URL using attacker‑specified credentials IDs, potentially capturing credentials stored in Je...