Lucene search

K
osvGoogleOSV:GHSA-79RM-F26G-296P
HistoryMay 24, 2022 - 4:51 p.m.

Jenkins Maven Release Plugin vulnerable to Cross-site Scripting

2022-05-2416:51:51
Google
osv.dev
10
jenkins
maven
release plugin
cross-site scripting
vulnerable
html
javascript
escaped
software

EPSS

0.001

Percentile

22.0%

A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.

Variables on affected views are now escaped.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-79RM-F26G-296P