CVE-2022-30969

CVE-2022-30969 affects Jenkins Autocomplete Parameter Plugin (versions 1.1 and earlier). The issue is a CSRF flaw that can allow an administrator’s session to run arbitrary code without sandbox protection when visiting a malicious page. Impact per available data: high, with CVSS3.1 base score 8.8...

CVE-2022-30970

CVE-2022-30970 affects Jenkins Autocomplete Parameter Plugin, versions 1.1 and earlier. The vulnerability arises from how Dropdown Autocomplete and Auto Complete String parameter names are referenced in views, with parameters not escaped in JavaScript embedded in view definitions, creating a stor...

CVE-2022-30961

CVE-2022-30961 : Jenkins Autocomplete Parameter Plugin (versions 1.1 and earlier) exposes a stored XSS vulnerability. The plugin does not escape the names of Dropdown Autocomplete and Auto Complete String parameters on views where parameters are displayed, allowing an attacker with Item/Configure...