CVE-2022-34208

Summary

A missing permission check in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Beaker builder Pluginunspecified <= 1.10affected
Jenkins projectJenkins Beaker builder Pluginnext of 1.10 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References