Stored XSS vulnerability in validating-email-parameter

validating-email-parameter 1.10 and earlier does not escape the name and description of its parameter type. Additionally, it disables the security hardening added in Jenkins 2.44 and LTS 2.32.2 as part of the SECURITY-353 / CVE-2017-2601 fix that protects the "Build With Parameters" and...

PT-2022-22343 · Jenkins · Jenkins Validating Email Parameter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Validating Email Parameter Plugin versions 1.10 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This is due to the plugin not escaping the name and description of its parameter type...

PT-2022-20423 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Selection tasks Plugin versions 1.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which is exploitable by attackers with Item/Configure permission. This occurs because the plugin does n...

PT-2022-19385 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins promoted builds Plugin versions 873.v6149db d64130 and earlier, except version 3.10.1 Description: The issue results in a stored cross-site scripting XSS vulnerability, which can be exploited by attackers with Item/Configure permissio...