GHSA-PC9C-547W-HHMC Cross-site Scripting in Jenkins REST List Parameter Plugin

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Jenkins REST List Parameter Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. A cross-site scripting...

CVE-2022-34196

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34196

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34196

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

[SECURITY] Fedora 35 Update: golang-github-emicklei-restful-3.8.0-1.fc35

Package for building REST-style Web Services using Go...

[SECURITY] Fedora 36 Update: golang-github-emicklei-restful-3.8.0-1.fc36

Package for building REST-style Web Services using Go...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-barbican) security update

An update for openstack-barbican is now available for Red Hat OpenStack Platform 16.2.3 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2022-34196

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34196

CVE-2022-34196 affects Jenkins with the REST List Parameter Plugin prior to 1.6.0. The plugin does not escape the name and description of REST list parameters on parameter-displaying views, causing a stored XSS vulnerability exploitable by attackers who have Item/Configure permission. Connected a...

Jenkins Plugin REST List Parameter 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. A cross-site scripting...

PT-2022-22065 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins REST List Parameter Plugin versions 1.5.2 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of REST list parameters on views...

Rest API Endpoint Leaked Project Categories, Project categories, status categories, issue link types, priorities, and resolutions to Unauthorised users

Affected versions of Atlassian Jira Server and Data Center allows an Un-Authenticated attacker to view Project categories, status categories, issue link types, priorities, and resolutions via an Information Disclosure vulnerability on the following Endpoints: /rest/api/2/issueLinkType...

Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1629 Malicious code in bluejeans-api-rest-meetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a43e4229bfe7054913dd74a700512a79d803b5d9bad65bd4280562a4f06c7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in body-complex-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27fea97b9d518665eef95629efaf4c554bdce153227e8a69e10978c9af8ec4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1637 Malicious code in body-complex-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27fea97b9d518665eef95629efaf4c554bdce153227e8a69e10978c9af8ec4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitpay-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b359ec43ede6545e2db9641843726e67e66badd464b4f6c14f6f8f8c100615d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a111621146a85a7b02970681f36ea6df3a2210812fa555bf856546d44e00b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...