CVE-2022-34210

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:threadfix:*:*:*:*:*:jenkins:*:*

Information

Published : 2022-06-23 10:15

Updated : 2022-06-29 15:24


NVD link : CVE-2022-34210

Mitre link : CVE-2022-34210


JSON object : View

CWE
CWE-862

Missing Authorization

Products Affected

jenkins

  • threadfix