Skip to content
Not rated

CVE-2022-25203 Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS)…

Description

Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Team Views Plugin 0.9 earliest → 0.9.0 No fix stated
Track this CVE