Lucene search
+L

Stored XSS vulnerability in ownership

🗓️ 29 Mar 2022 00:00:00Reported by Jenkins Security TeamType 
jenkins
 jenkins
🔗 www.jenkins.io👁 18 Views

Stored XSS in ownership up to 0.13.0, unescaped secondary owner names allow exploitation by attackers with Item Configure permission.

Related
Detection
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2022-28149
29 Mar 202213:15
–attackerkb
circl
Circl
CVE-2022-28149
29 Mar 202216:41
–circl
cnnvd
CNNVD
Jenkins Job and Node Ownership Plugin Cross-Site Script Vulnerability
29 Mar 202200:00
–cnnvd
cnvd
CNVD
Jenkins Job and Node ownership Plugin跨站脚本漏洞
31 Mar 202200:00
–cnvd
cve
CVE
CVE-2022-28149
29 Mar 202212:31
–cve
cvelist
Cvelist
CVE-2022-28149
29 Mar 202212:31
–cvelist
github
Github Security Blog
Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
30 Mar 202200:00
–github
nessus
Tenable Nessus
Jenkins plugins Multiple Vulnerabilities (2022-03-29)
31 Mar 202200:00
–nessus
mend
Mend
CVE-2022-28149
29 Mar 202212:31
–mend
nvd
NVD
CVE-2022-28149
29 Mar 202213:15
–nvd
Rows per page
Vulners
Node
jenkinsjob_and_node_ownershipRange≤0.13.0jenkins

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Mar 2022 00:00Current
5.3Medium risk
Vulners AI Score5.3
CVSS 23.5
CVSS 3.15.4 - 8
EPSS0.00824
18