Lucene search

K
osvGoogleOSV:GHSA-9HCR-66CJ-R9HP
HistoryMay 24, 2022 - 5:27 p.m.

Stored XSS vulnerability in Jenkins Valgrind Plugin

2022-05-2417:27:06
Google
osv.dev
8
jenkins
valgrind
plugin
xss
vulnerability
xml
reports
attackers
control

EPSS

0.001

Percentile

22.0%

Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-9HCR-66CJ-R9HP