Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:6 p.m.3 views

CVE-2022-30963

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.4AI score0.00217EPSS
Exploits0References1
OSV
OSV
added 2022/05/18 12:0 a.m.32 views

GHSA-5PMP-7WC9-V7VW Cross-site Scripting in Jenkins JDK Parameter Plugin

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

8CVSS5.8AI score0.00217EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/18 12:0 a.m.33 views

Cross-site Scripting in Jenkins JDK Parameter Plugin

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

5.4CVSS5.7AI score0.00217EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/05/17 3:15 p.m.2 views

CVE-2022-30963

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6.1AI score0.00217EPSS
Exploits0References1
Prion
Prion
added 2022/05/17 3:15 p.m.10 views

Cross site scripting

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

3.5CVSS5.3AI score0.00217EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/17 2:6 p.m.13 views

CVE-2022-30963

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.8AI score0.00217EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.1 views

Jenkins JDK Parameter Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins JDK Parameter Plugin 1.0 and earlier versions have a cross-site...

5.4CVSS5.5AI score0.00217EPSS
Exploits0References3
Rows per page
Query Builder