GHSA-pxp5-g66h-wpv2MediumCVSS 4.8

Missing hostname validation in Jenkins View26 Test-Reporting Plugin

Published
September 22, 2022
Last Modified
May 28, 2025

🔗 CVE IDs covered (1)

CVE-2022-41244 →

📋 Description

Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:view26:<= 1.0.7

🔗 References (3)