Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jenkins dotci vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-41238
A missing permission check in Jenkins DotCi Plugin 2.40.00 and previous versions allows unauthenticated malicious users to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
Jenkins Dotci
NA
CVE-2022-41237
Jenkins DotCi Plugin 2.40.00 and previous versions does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Jenkins Dotci
NA
CVE-2022-41239
Jenkins DotCi Plugin 2.40.00 and previous versions does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.
Jenkins Dotci
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started