CVE-2022-27197

CVE-2022-27197 affects Jenkins Dashboard View Plugin 2.18 and earlier. A stored XSS vulnerability arises because the Iframe Portlet’s Iframe source URL is not validated, enabling attackers who can configure views to inject script. Multiple external sources corroborate the issue and, in some cases...

CVE-2021-21649

CVE-2021-21649 affects Jenkins Dashboard View Plugin (versions 2.15 and earlier). The vulnerability arises from not escaping URLs in Image Dashboard Portlets, allowing stored XSS via adversaries with View/Configure permission. The in-document details specify a stored XSS impact with user-controll...

CVE-2019-10396

CVE-2019-10396 affects Jenkins Dashboard View Plugin versions 2.11 and earlier. The root cause is failure to escape build descriptions in the Latest Builds View, enabling cross-site scripting by users who can modify build descriptions. Public sources (Red Hat, GitHub advisories, and CVE records) ...