CVE-2022-27215

CVE-2022-27215 concerns a missing permission check in the Jenkins Release Helper Plugin (versions 1.3.3 and earlier). This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, enabling unauthorized outbound requests from the J...

CVE-2022-27214

CVE-2022-27214 is a CSRF vulnerability in Jenkins Release Helper Plugin, present in version 1.3.3 and earlier. The issue allows an attacker to cause the Jenkins server to connect to an attacker‑specified URL using attacker‑specified credentials. Affected component: Release Helper Plugin for Jenki...