Lucene search

K
osvGoogleOSV:BIT-JENKINS-2020-2229
HistoryMar 06, 2024 - 11:04 a.m.

BIT-jenkins-2020-2229

2024-03-0611:04:46
Google
osv.dev
4
jenkins
lts
cross-site scripting

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
jenkinslt2.235.3
jenkinslt2.251.0

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%