CVE-2022-41238

CRITICAL · CVSS 9.8 EPSS 0.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-41238

Severity

CRITICAL

CVSS

9.8

EPSS

0.91%

Jenkins

Original NVD Description

A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.