Skip to content
Sign in
Not rated

CVE-2022-34198 Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch…

Description

Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Stash Branch Parameter Plugin 0.3 earliest → 0.3.0 No fix stated

Other CVEs of Jenkins Stash Branch Parameter Plugin

The 2 CVEs of Jenkins Stash Branch Parameter Plugin →
CVE-2020-2210 Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its… Not rated
Track this CVE