Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-34777
HistoryJun 30, 2022 - 6:15 p.m.

Cross site scripting

2022-06-3018:15:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

22.3%

Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CPENameOperatorVersion
gitlable1.5.34

0.001 Low

EPSS

Percentile

22.3%