Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58427
HistoryJul 04, 2022 - 12:00 a.m.

Jenkins Plugin GitLab Cross-Site Scripting Vulnerability

2022-07-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

22.3%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exists in Jenkins Plugin GitLab, which stems from multiple fields that do not escape the description inserted into the webhook trigger build. An attacker with project (configuration) privileges can exploit this vulnerability to cause a cross-site scripting attack.

CPENameOperatorVersion
jenkins gitlab pluginle1.5.34

0.001 Low

EPSS

Percentile

22.3%