Lucene search

K
osvGoogleOSV:GHSA-VWFM-42Q6-QJ75
HistoryMay 14, 2022 - 1:40 a.m.

Stored XSS vulnerability in Config File Provider Plugin

2022-05-1401:40:44
Google
osv.dev
9
cross-site scripting
config file provider
jenkins

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

18.2%

A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users with the ability to configure configuration files to insert arbitrary HTML into some pages in Jenkins.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

18.2%

Related for OSV:GHSA-VWFM-42Q6-QJ75