CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

CVE-2022-30960 affects Jenkins Application Detector Plugin (versions 1.0.8 and earlier). The vulnerability is a stored XSS due to failure to escape the name of Chois Application Version parameters on views displaying parameters, exploitable by attackers with Item/Configure permission. Connected s...

PT-2022-20416 · Jenkins · Jenkins Application Detector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Application Detector Plugin versions 1.0.8 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape the name of Chois Application Version parameters...