description: A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.
affected:
{
product: Jenkins CloudBees Docker Hub/Registry Notification Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.6.2, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 2.6.0.1
}