Description
A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2276
Related Vulnerabilities
CVE-2022-28158 Vulnerability in maven package com.surenpi.jenkins:phoenix-autotest
CVE-2021-25640 Vulnerability in maven package org.apache.dubbo:dubbo
CVE-2016-5016 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-common
CVE-2023-30541 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2018-14042 Vulnerability in maven package org.webjars.bower:bootstrap