Lucene search
GoogleOSV:GHSA-JVVX-HMMR-RHGGHistoryJul 28, 2022 - 12:00 a.m.
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
2022-07-2800:00:42
Google
osv.dev
18
jenkins
dynamic extended choice parameter plugin
xss
vulnerability
stored
jenkins dynamic extended choice parameter plugin 1.0.1
cross-site scripting
attackers
item/configure permission
software
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Related
github
github
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
2022-07-28 00:00:42
cvelist
cvelist
CVE-2022-36902
2022-07-27 14:25:15
osv
osv
CVE-2022-36902
2022-07-27 15:15:09
cve
cve
CVE-2022-36902
2022-07-27 15:15:09
prion
prion
Cross site scripting
2022-07-27 15:15:00
nvd
nvd
CVE-2022-36902
2022-07-27 15:15:09
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
Related for OSV:GHSA-JVVX-HMMR-RHGG