CVE-2022-30960

2022-05-1715:15:10

Google

osv.dev

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CPENameOperatorVersion
app-detector-plugineqapp-detector-1.0.1
app-detector-plugineqapp-detector-1.0.8
app-detector-plugineqapp-detector-1.0.3
app-detector-plugineqapp-detector-1.0.2
app-detector-plugineqapp-detector-1.0.6
app-detector-plugineqapp-detector-1.0.5
app-detector-plugineqapp-detector-1.0.4
app-detector-plugineqapp-detector-1.0.0

Name	Operator	Version
app-detector-plugin	eq	app-detector-1.0.1
app-detector-plugin	eq	app-detector-1.0.8
app-detector-plugin	eq	app-detector-1.0.3
app-detector-plugin	eq	app-detector-1.0.2
app-detector-plugin	eq	app-detector-1.0.6
app-detector-plugin	eq	app-detector-1.0.5
app-detector-plugin	eq	app-detector-1.0.4
app-detector-plugin	eq	app-detector-1.0.0

References

www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2717

0.001 Low

EPSS

Percentile

22.2%

JSON

Related for OSV:CVE-2022-30960