Jenkins Project Jenkins JiraTestResultReporter Plugin

• CVE-2022-28137 Unrated A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-s 0.7%
• CVE-2022-28136 High 8.8 A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specifi 0.7%