Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-53891
HistoryJul 04, 2022 - 12:00 a.m.

Jenkins build-metrics Plugin跨站脚本漏洞

2022-07-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

22.2%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins build-metrics Plugin version 1.3 contains a cross-site scripting vulnerability that stems from not escaping the build description on its view, which could be exploited by an attacker to perform cross-site scripting attacks. vulnerability can be exploited to perform cross-site scripting attacks.

CPENameOperatorVersion
jenkins build-metrics plugineq1.3

0.001 Low

EPSS

Percentile

22.2%

Related for CNVD-2022-53891