Lucene search

K
osvGoogleOSV:GHSA-28X9-HC4P-9VH2
HistoryMay 24, 2022 - 5:28 p.m.

Stored XSS vulnerability in android-lint Plugin

2022-05-2417:28:25
Google
osv.dev
10
stored xss
android lint plugin
jenkins
cross-site scripting
vulnerability
software

EPSS

0.001

Percentile

22.0%

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin’s post-build step.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-28X9-HC4P-9VH2