Cross site scripting

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

checkbox parameter

xss

vulnerability

attackers

permission

0.001 Low

EPSS

Percentile

33.5%

JSON

Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CPENameOperatorVersion
custom_checkbox_parameterle1.4

CPE	Name	Operator	Version
	custom_checkbox_parameter	le	1.4

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2022-43425