Description
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
Remediation
References
https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867
Related Vulnerabilities
CVE-2022-25204 Vulnerability in maven package by.dev.madhead.doktor:doktor
CVE-2017-2650 Vulnerability in maven package cprice404:pipeline-classpath
CVE-2012-0047 Vulnerability in maven package org.apache.wicket:wicket
CVE-2020-26870 Vulnerability in maven package org.webjars.npm:dompurify
CVE-2023-33942 Vulnerability in maven package com.liferay:com.liferay.asset.browser.web