Persistent XSS vulnerability in Jenkins OWASP Dependency-Check Plugin

2022-05-1700:32:26

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

CPENameOperatorVersion
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.2.6
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.0.3
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.2.11
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.2.3.1
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.3.6
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.2.2
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.2.11.1
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.4.3
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.0.8
org.jenkins-ci.plugins:dependency-check-jenkins-plugineq1.0.4

Name	Operator	Version
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.2.6
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.0.3
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.2.11
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.2.3.1
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.3.6
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.2.2
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.2.11.1
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.4.3
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.0.8
org.jenkins-ci.plugins:dependency-check-jenkins-plugin	eq	1.0.4