Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/18 12:0 a.m.72 views

GHSA-5PMP-7WC9-V7VW Cross-site Scripting in Jenkins JDK Parameter Plugin

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

8CVSS5.8AI score0.00756EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/18 12:0 a.m.37 views

Cross-site Scripting in Jenkins JDK Parameter Plugin

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

5.4CVSS5.7AI score0.00756EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/05/17 3:15 p.m.16 views

Cross site scripting

Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

3.5CVSS5.3AI score0.00756EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder