Lucene search
PRIOn knowledge basePRION:CVE-2022-43420HistoryOct 19, 2022 - 4:15 p.m.
Cross site scripting
2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
jenkins
contrast service
stored xss
vulnerability
api responses
0.001 Low
EPSS
Percentile
33.4%
Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contrast_continuous_application_security | lt | 3.10 |
Related
osv
osv
Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin
2022-10-19 19:00:18
CVE-2022-43420
2022-10-19 16:15:11
alpinelinux
alpinelinux
CVE-2022-43420
2022-10-19 16:15:11
cve
cve
CVE-2022-43420
2022-10-19 16:15:11
cvelist
cvelist
CVE-2022-43420
2022-10-19 00:00:00
nvd
nvd
CVE-2022-43420
2022-10-19 16:15:11
github
github
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-10-19)
2023-03-03 00:00:00