Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08387
HistoryJan 16, 2022 - 12:00 a.m.

Jenkins Matrix Project Plugin Cross-Site Scripting Vulnerability

2022-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
jenkins
matrix project plugin
cross-site scripting
vulnerability
data validation
javascript code

EPSS

0.001

Percentile

32.7%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Matrix Project Plugin in version 1.19 and earlier has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.