Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:50 p.m.4 views

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.4AI score0.00114EPSS
Exploits0References1
CNVD
CNVD
added 2022/05/19 12:0 a.m.12 views

Jenkins Application Detector跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application. Jenkins Application Detector 1.0.8 and earlier versions have a cross-site scripting vulnerability that stems from the program not properly escaping the view of the display...

5.4CVSS2.8AI score0.00114EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/05/18 12:0 a.m.26 views

Cross-site Scripting in Jenkins Application Detector Plugin

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.5AI score0.00114EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/05/18 12:0 a.m.40 views

GHSA-6WH8-MR6F-6CX2 Cross-site Scripting in Jenkins Application Detector Plugin

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

8CVSS5.4AI score0.00114EPSS
Exploits0References3
OSV
OSV
added 2022/05/17 3:15 p.m.14 views

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score
Exploits0References1
NVD
NVD
added 2022/05/17 3:15 p.m.12 views

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00114EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/17 3:15 p.m.3 views

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.9AI score0.00114EPSS
Exploits0References2
CVE
CVE
added 2022/05/17 2:6 p.m.119 views

CVE-2022-30960

CVE-2022-30960 affects Jenkins Application Detector Plugin (versions 1.0.8 and earlier). The vulnerability is a stored XSS due to failure to escape the name of Chois Application Version parameters on views displaying parameters, exploitable by attackers with Item/Configure permission. Connected s...

5.4CVSS5.4AI score0.00114EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.2 views

Jenkins Application Detector Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application. Jenkins Application Detector 1.0.8 and earlier versions have a cross-site scripting vulnerability that stems from the program not properly escaping the view of the display...

5.4CVSS5.4AI score0.00114EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/05/17 12:0 a.m.2 views

PT-2022-20416 · Jenkins · Jenkins Application Detector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Application Detector Plugin versions 1.0.8 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape the name of Chois Application Version parameters...

8CVSS5.2AI score0.00114EPSS
Exploits0References7
Rows per page
Query Builder