CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

CVE-2022-30960 affects Jenkins Application Detector Plugin (versions 1.0.8 and earlier). The vulnerability is a stored XSS due to failure to escape the name of Chois Application Version parameters on views displaying parameters, exploitable by attackers with Item/Configure permission. Connected s...

PT-2022-20416 · Jenkins · Jenkins Application Detector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Application Detector Plugin versions 1.0.8 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape the name of Chois Application Version parameters...

CVE-2022-30960: Improper Neutralization of Input During Web Page Generation

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...