5.4
Medium
CVE-2022-41240 Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a…
Description
Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Walti Plugin 1.0 | earliest → 1.0.1 | No fix stated |