Lucene search

Plot Security Vulnerabilities

cve

CVE-2022-34783

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

5.4CVSS

5.4AI Score

0.001EPSS

2022-06-30 06:15 PM

250

cve

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

9.8CVSS

9.4AI Score

0.002EPSS

2022-12-12 09:15 AM