Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08040
HistoryJan 16, 2022 - 12:00 a.m.

Jenkins Badge Plugin Cross-Site Scripting Vulnerability

2022-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

22.2%

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Badge Plugin in version 1.9 and earlier has a cross-site scripting vulnerability, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
jenkins badge pluginle1.9

0.001 Low

EPSS

Percentile

22.2%

Related for CNVD-2022-08040