Not rated

CVE-2022-29042 Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and…

Description

Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice parameters on Job Generator jobs' Build With Parameters views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Job Generator Plugin 1.22	earliest → 1.22	No fix stated

Do you use Jenkins Job Generator Plugin?

Track this CVE Watch Jenkins Job Generator Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-29042

Timeline

Published April 12, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE