Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability requires...

GHSA-GPW4-7MCW-M8VX Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability requires...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

CVE-2022-34193 relates to the Jenkins Package Version Plugin (versions ≤ 1.0.1). The issue is a stored XSS vulnerability: the plugin does not escape the name of Package version parameters on views displaying parameters, enabling an attacker with Item/Configure permission to inject script. The con...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193: Improper Neutralization of Input During Web Page Generation

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2022-22062 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Package Version Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the Jenkins Package Version Plugin does not escape the name of Package version parameters ...

@ampproject/toolbox-cli (3.0.0-canary.2), @ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=3.0.0-canary.2) +46 more potentially affected by CVE-2022-25898 via jsrsasign (>=10.0.0, <=10.5.24)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.0.1, =0.9.1, =0.9.3, =0.9.3, =0.9.3, =0.9.3, =0.9.3, =10.4.0-snapshot-1623311478116, =14.0.4 and more Source cves: CVE-2022-25898 Source advisory: SNYK:JS-JSRSASIGN-2869122...

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1. An upgraded version of the package is available that resolves this issue...

Slackware: Security Advisory (SSA:2016-141-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23303 affecting package wpa_supplicant for versions less than 2.10-1

CVE-2022-23303 affecting package wpasupplicant for versions less than 2.10-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-27803 affecting package wpa_supplicant for versions less than 2.9-4

CVE-2021-27803 affecting package wpasupplicant for versions less than 2.9-4. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2018-0436)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...