Not rated

CVE-2022-34791 Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter…

Description

Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Validating Email Parameter Plugin 1.10	earliest → 1.10	No fix stated

Do you use Jenkins Validating Email Parameter Plugin?

Track this CVE Watch Jenkins Validating Email Parameter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-34791

Timeline

Published June 30, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE