CVE-2022-30970

creationtimestamp| type| source ---|---|--- 2022-05-17 18:27:31+00:00| seen| https://t.me/cibsecurity/42808...

CVE-2022-30970

Jenkins Autocomplete Parameter Plugin 1.1 and earlier references Dropdown Autocomplete parameter and Auto Complete String parameter names in an unsafe manner from Javascript embedded in view definitions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with...

CVE-2022-30970

CVE-2022-30970 affects Jenkins Autocomplete Parameter Plugin, versions 1.1 and earlier. The vulnerability arises from how Dropdown Autocomplete and Auto Complete String parameter names are referenced in views, with parameters not escaped in JavaScript embedded in view definitions, creating a stor...