Lucene search
GoogleOSV:CVE-2022-36902HistoryJul 27, 2022 - 3:15 p.m.
CVE-2022-36902
2022-07-2715:15:09
Google
osv.dev
2
jenkins
extended choice
xss
vulnerability
configuration
permission
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Related
github
github
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
2022-07-28 00:00:42
cvelist
cvelist
CVE-2022-36902
2022-07-27 14:25:15
osv
osv
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
2022-07-28 00:00:42
cve
cve
CVE-2022-36902
2022-07-27 15:15:09
prion
prion
Cross site scripting
2022-07-27 15:15:00
nvd
nvd
CVE-2022-36902
2022-07-27 15:15:09
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
Related for OSV:CVE-2022-36902