CVE-2022-41243: Jenkins Smalltest

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.

Affected products

• Jenkins Smalltest: up to and including 1.0.4

Published 2022-09-21. Last modified 2026-06-17.