Jenkins Warnings NG Plugin Cross-site scripting vulnerability

2022-05-2422:00:03

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

JSON

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages.

CPENameOperatorVersion
io.jenkins.plugins:warnings-ngeq1.0.0-beta4
io.jenkins.plugins:warnings-ngeq3.0.0
io.jenkins.plugins:warnings-ngeq1.0.0-beta3
io.jenkins.plugins:warnings-ngeq1.0.0-beta6
io.jenkins.plugins:warnings-ngeq2.1.1
io.jenkins.plugins:warnings-ngeq1.0.0-beta5
io.jenkins.plugins:warnings-ngeq1.0.0-beta1
io.jenkins.plugins:warnings-ngeq1.0.0-beta7
io.jenkins.plugins:warnings-ngeq2.0.0
io.jenkins.plugins:warnings-ngeq2.1.0

Name	Operator	Version
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta4
io.jenkins.plugins:warnings-ng	eq	3.0.0
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta3
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta6
io.jenkins.plugins:warnings-ng	eq	2.1.1
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta5
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta1
io.jenkins.plugins:warnings-ng	eq	1.0.0-beta7
io.jenkins.plugins:warnings-ng	eq	2.0.0
io.jenkins.plugins:warnings-ng	eq	2.1.0