CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Jenkins. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-41238
Severity
CRITICAL
CVSS
9.8
EPSS
0.91%
Jenkins
Original NVD Description
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
Related CVEs
Other vulnerabilities affecting the same vendor(s)