Lucene search

K
osvGoogleOSV:GHSA-H2V5-3HPC-85J5
HistoryMar 16, 2022 - 12:00 a.m.

Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin

2022-03-1600:00:44
Google
osv.dev
16
jenkins
xss
vulnerability
radio buttons
check boxes
item/configure permission

EPSS

0.001

Percentile

22.0%

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

EPSS

0.001

Percentile

22.0%