CVE-2022-46687

CVE-2022-46687 affects Jenkins Spring Config Plugin 2.0.0 and earlier. The vulnerability arises because build display names shown in the Spring Config view are not escaped, causing stored XSS when an attacker can modify those names. Affected versions: 2.0.0 and earlier. Mitigation: upgrade to 2.0...