Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43409
HistoryOct 19, 2022 - 4:15 p.m.

Cross site scripting

2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
2
jenkins
pipeline
api
xss
vulnerability
hyperlinks
post requests

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%

Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Pipelines.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.4%