2 matches found
CVE-2022-34193
Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
5.4CVSS0.0064EPSS
SaveExploits0References3
CVE-2022-34193: Improper Neutralization of Input During Web Page Generation
Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
5.4CVSS5.9AI score0.0064EPSS
SaveExploits0References2
20