GHSA-8h2m-54wh-gwj3
Jenkins docker-build-step Plugin missing permission check
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:docker-build-step | <= 2.11 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
References
External links from the advisory. They lead to third-party sites.