Lucene search

K
osvGoogleOSV:GHSA-F8W9-66FP-3JGW
HistoryMay 24, 2022 - 4:59 p.m.

Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

2022-05-2416:59:38
Google
osv.dev
9
jenkins
build-metrics
plugin
cross-site scripting
vulnerability
query parameter
fix
software

AI Score

5.9

Confidence

High

EPSS

0.973

Percentile

99.9%

Jenkins build-metrics Plugin does not properly escape the label query parameter, resulting in a reflected cross-site scripting vulnerability.

As of publication of this advisory, there is no fix.

AI Score

5.9

Confidence

High

EPSS

0.973

Percentile

99.9%