Skip to content
Sign in
Not rated

CVE-2022-34196 Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on…

Description

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins REST List Parameter Plugin 1.5 earliest → 1.5.2 No fix stated

Other CVEs of Jenkins REST List Parameter Plugin

The 2 CVEs of Jenkins REST List Parameter Plugin →
CVE-2021-21635 Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded… Not rated
Track this CVE