Lucene search
GoogleOSV:GHSA-7QPM-VMWV-HQ7HHistorySep 22, 2022 - 12:00 a.m.
Stored XSS vulnerability in Jenkins Walti plugin
2022-09-2200:00:28
Google
osv.dev
5
jenkins
walti
plugin
vulnerability
xss
exploitable
api
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.8%
Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.
Related
cve
cve
CVE-2022-41240
2022-09-21 16:15:10
cvelist
cvelist
CVE-2022-41240
2022-09-21 15:45:59
github
github
Stored XSS vulnerability in Jenkins Walti plugin
2022-09-22 00:00:28
prion
prion
Cross site scripting
2022-09-21 16:15:00
nvd
nvd
CVE-2022-41240
2022-09-21 16:15:10
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.8%
Related for OSV:GHSA-7QPM-VMWV-HQ7H