Not rated

CVE-2022-34185 Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views…

Description

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Date Parameter Plugin 0.0	earliest → 0.0.4	No fix stated

Do you use Jenkins Date Parameter Plugin?

Track this CVE Watch Jenkins Date Parameter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-34185

Timeline

Published June 22, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE