Junglewise Threat Intelligence

CVE-2022-41238: Lack of authentication mechanism in Jenkins DotCi Plugin webhook

CVE-2022-41238 · Severity: low · CVSS 3.1 · Published 2022-09-22

Technologies: com.groupon.jenkins-ci.plugins:DotCi (Maven). Vendors: Maven.

Executive brief

Lack of authentication mechanism in Jenkins DotCi Plugin webhook

Affected products

  • Maven com.groupon.jenkins-ci.plugins:DotCi

Related threats