Lucene search
K

7 matches found

OSV
OSV
added 2022/03/16 12:0 a.m.22 views

GHSA-35H9-H439-VVMR Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

8CVSS5.4AI score0.00235EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/03/16 12:0 a.m.24 views

Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

5.4CVSS2.3AI score0.00235EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/15 5:15 p.m.1 views

CVE-2022-27213

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

5.4CVSS5.8AI score0.00235EPSS
Exploits0References3
CVE
CVE
added 2022/03/15 4:46 p.m.158 views

CVE-2022-27213

The CVE-2022-27213 entry concerns the Jenkins Environment Dashboard Plugin (versions 1.1.10 and earlier). The vulnerability is a stored cross-site scripting (XSS) flaw caused by the plugin not escaping environment order and component order configuration values in its views, making it exploitable ...

5.4CVSS5.4AI score0.00235EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/15 4:46 p.m.19 views

CVE-2022-27213

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

6AI score0.00235EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.1 views

Jenkins Environment Dashboard 插件跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

5.4CVSS5.3AI score0.00235EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/03/15 12:0 a.m.2 views

PT-2022-18301 · Jenkins · Jenkins Environment Dashboard Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Environment Dashboard Plugin versions 1.1.10 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the Environment order and the Component order configuration values in the...

8CVSS5.1AI score0.00235EPSS
Exploits0References6
Rows per page
Query Builder