Man-in-the-Middle Vulnerability in Jenkins View26 Test-Reporting Plugin

CVE-2022-41244

Summary

The Jenkins View26 Test-Reporting Plugin prior to version 1.0.8 is susceptible to a vulnerability that lacks hostname validation when establishing connections to the configured View26 server. This flaw could enable an attacker to execute a man-in-the-middle attack, potentially allowing them to intercept sensitive data during the communication process.

References