CVE-2022-27200

Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...

CVE-2022-27200

The CVE-2022-27200 entry identifies a stored XSS in Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier, caused by this plugin not escaping role names on the configuration form. Exploitation requires Overall/Administer permission, enabling an attacker to inject script via role name...