CVE-2022-41228: 
Java vulnerability analysis and mitigation

CVE-2022-41228 is a security vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.129 and earlier, disclosed on September 21, 2022. The vulnerability stems from a missing permission check in a method implementing form validation, affecting the plugin's security controls (Jenkins Advisory).

The vulnerability is classified with Medium severity (CVSS) and involves a missing permission check in the form validation implementation. This security flaw allows attackers who have Overall/Read permissions to connect to an attacker-specified webserver using attacker-specified credentials (Jenkins Advisory).

The vulnerability enables attackers with Overall/Read permissions to establish unauthorized connections to attacker-controlled webservers using specified credentials, potentially leading to credential exposure and unauthorized access (Jenkins Advisory).

The vulnerability has been fixed in NS-ND Integration Performance Publisher Plugin version 4.8.0.130. The updated version requires POST requests and Overall/Administer permission for the affected form validation method. Users are advised to upgrade to this version to mitigate the vulnerability (Jenkins Advisory).