CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/08/23 5:15 p.m.•31 views

CVE-2022-38664

Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure job names...

5.4CVSS0.0059EPSS

Exploits0References2

ATTACKERKB•added 2022/08/23 5:15 p.m.•4 views

CVE-2022-38664

5.4CVSS5.6AI score0.0059EPSS

Exploits0References3

CVE•added 2022/08/23 4:45 p.m.•95 views

CVE-2022-38664

CVE-2022-38664 concerns Jenkins Job Configuration History Plugin (1165.v8cc9fd1f4597 and earlier). The vulnerability stems from the plugin not escaping the job name on the System Configuration History page, enabling a stored cross-site scripting (XSS) attack. Exploitation requires an attacker to ...

5.4CVSS5.3AI score0.0059EPSS

Exploits0References2Affected Software1