Lucene search

K
osvGoogleOSV:GHSA-5PPX-RGW2-XG23
HistoryMay 14, 2022 - 1:04 a.m.

Improper Neutralization of Input During Web Page Generation in Jenkins

2022-05-1401:04:30
Google
osv.dev
6

0.001 Low

EPSS

Percentile

33.1%

Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.

0.001 Low

EPSS

Percentile

33.1%