Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•5 views

CVE-2022-28159

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.8AI score0.00824EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•3 views

CVE-2022-28159: Improper Neutralization of Input During Web Page Generation

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.9AI score0.00824EPSS
SaveExploits0References2
Rows per page
Query Builder