Package · Maven

org.jenkins-ci.plugins:dockerhub-notification

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2022-45385

Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin

A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.

Jenkins Project Jenkins CloudBees Docker Hub/Registry Notification Plugin org.jenkins-ci.plugins:dockerhub-notification Web / CMS Maven

Nov 15, 2022