Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-45380
HistoryNov 15, 2022 - 8:15 p.m.

Cross site scripting

2022-11-1520:15:00
PRIOn knowledge base
www.prio-n.com
6
jenkins junit plugin
vulnerability
http urls
stored
cross-site scripting
attack
security

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CPENameOperatorVersion
juniteq< 1160.vf1f1aaeab7f

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%