Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54925
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins SiteMonitor Plugin Cross-Site Scripting Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

22.3%

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exists in Jenkins SiteMonitor Plugin 0.6 and earlier versions, which stems from not escaping the URL of the site to be monitored in the tooltip. An attacker with project/configuration privileges could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
jenkins sitemonitor pluginlt0.6

0.001 Low

EPSS

Percentile

22.3%

Related for CNVD-2022-54925