Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-27196
HistoryMar 15, 2022 - 5:15 p.m.

Cross site scripting

2022-03-1517:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

22.2%

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.

CPENameOperatorVersion
favoritelt2.4.1

0.001 Low

EPSS

Percentile

22.2%