org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2023-27903 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

CVE-2022-35520

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml...

GHSA-JHFV-8936-G652 Cross-site Scripting in Jenkins Hidden Parameter Plugin

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Cross-site Scripting in Jenkins Hidden Parameter Plugin

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34188

CVE-2022-34188 describes a stored XSS vulnerability in Jenkins Hidden Parameter Plugin versions 0.0.4 and earlier, where the plugin fails to escape the name and description of Hidden Parameter parameters on parameter-displaying views. This allows attackers with Item/Configure permission to inject...

CVE-2022-34188: Improper Neutralization of Input During Web Page Generation

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Plugin Hidden Parameter Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from a failure to escape the name and description of t...

PT-2022-22056 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Hidden Parameter Plugin versions 0.0.4 and earlier Description: The Jenkins Hidden Parameter Plugin does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-si...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2019-10402 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2019-10403 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2021-21686 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...