CVE-2022-28153

The CVE-2022-28153 entry refers to the Jenkins SiteMonitor Plugin (versions up to 0.6) where URLs shown in tooltips are not escaped, causing a stored XSS vulnerability. The impact is exploitable by attackers with Item/Configure permission; no remediation details are provided in the supplied docum...

CVE-2019-10317

The CVE-2019-10317 entry affects the Jenkins SiteMonitor Plugin (version 0.5 and earlier), which unconditionally disabled SSL/TLS certificate validation and hostname verification for the Jenkins controller JVM. Root cause: the plugin’s behavior bypassed standard TLS checks globally, exposing the ...