Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2022/03/15 5:15 p.m.•9 views

CVE-2022-27213

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

5.4CVSS5.8AI score0.00824EPSS
SaveExploits0References3
Mend
Mend
•added 2022/03/15 4:46 p.m.•7 views

CVE-2022-27213

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

5.4CVSS0.00824EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/15 12:00 a.m.•6 views

CVE-2022-27213: Improper Neutralization of Input During Web Page Generation

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission...

5.4CVSS5.9AI score0.00824EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/03/15 12:00 a.m.•20 views

Stored XSS vulnerability in Environment Dashboard

Environment Dashboard 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with View/Configure permission. As of publication of this advisory,...

8CVSS5.3AI score0.00824EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder