Lucene search

K
osvGoogleOSV:GHSA-2C84-35RV-6Q3F
HistoryMay 24, 2022 - 5:28 p.m.

Stored XSS vulnerability in ClearCase Release Plugin

2022-05-2417:28:26
Google
osv.dev
4
jenkins
clearcase
release plugin
cross-site scripting
vulnerability
composite baseline
badge tooltip
attackers
job/configure permission

EPSS

0.001

Percentile

22.0%

Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-2C84-35RV-6Q3F