| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:docker-build-step | ≤ 2.11 | |
| docker-build-step | ≤ 2.11 |
A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free