Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-16717
HistoryFeb 17, 2022 - 12:00 a.m.

Jenkins Agent Server Parameter Plugin跨站脚本漏洞

2022-02-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
jenkins
open source
automation
server
plugin
cross-site scripting
vulnerability
parameter names
administrator cookie

EPSS

0.001

Percentile

22.0%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Agent Server Parameter Plugin 1.0 and earlier versions have a cross-site scripting vulnerability that stems from not escaping the parameter names of agent server parameters. An attacker could exploit this vulnerability to obtain an administrator cookie.

EPSS

0.001

Percentile

22.0%

Related for CNVD-2022-16717