description: A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
affected:
{
product: Jenkins DotCi Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.40.00, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: unknown, version: next of 2.40.00, versionType: custom
}