Skip to content
Sign in
Not rated

CVE-2022-34189 Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters…

Description

Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Image Tag Parameter Plugin 1.10 earliest → 1.10 No fix stated

Other CVEs of Jenkins Image Tag Parameter Plugin

The 2 CVEs of Jenkins Image Tag Parameter Plugin →
CVE-2023-30516 Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when… 6.5 Medium
Track this CVE