Not rated

CVE-2022-34197 Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers…

Description

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Sauce OnDemand Plugin 1.204	earliest → 1.204	No fix stated

The 2 CVEs of Jenkins Sauce OnDemand Plugin →

CVE-2026-70445 Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read… 4.3 Medium

Do you use Jenkins Sauce OnDemand Plugin?

Track this CVE Watch Jenkins Sauce OnDemand Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-34197

Timeline

Published June 22, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE

CVE-2022-34197 Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers…

Description

Affected products and versions

Other CVEs of Jenkins Sauce OnDemand Plugin