En resumen
- CVE-2022-45389 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a com.cloudbees.jenkins.plugins:xpdev, xp-dev (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.68%, mayor que el 52.4% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.
NVD description
A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free