CVE-2022-20614: Jenkins Mailer

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Affected products

• Jenkins Mailer: before 1.34.2 (fixed in 1.34.2); version 391.ve4a_38c1b_cf4b_ only
• Oracle Communications Cloud Native Core Automated Test Suite: version 1.9.0 only

Published 2022-01-12. Last modified 2026-06-17.