CVE-2022-45389

CVSS v3.1 5.3 (Medium)

EPSS 0.07 % (31^th)

Affected Products 1

Advisories 2

A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.

Weaknesses

CWE-862: Missing Authorization

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-11-15 20:15:12
(22 months ago)
Updated Date: 2023-11-01 20:07:06
(10 months ago)

Affected Products

Jenkins

Xp-dev

Configuration #1

		CPE23	From	Up To
	Jenkins Xp-dev for Jenkins 1.0 and prior versions	cpe:2.3:a:jenkins:xp-dev::::::jenkins		<= 1.0