Lucene search

K
osvGoogleOSV:GHSA-QXRX-M6V6-M767
HistoryMay 24, 2022 - 5:28 p.m.

Stored XSS vulnerability in Description Column Plugin

2022-05-2417:28:26
Google
osv.dev
6

0.001 Low

EPSS

Percentile

22.2%

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

0.001 Low

EPSS

Percentile

22.2%

Related for OSV:GHSA-QXRX-M6V6-M767