5.4
Medium
CVE-2022-46684 Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before…
Description
Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Checkmarx Plugin 2022.3 | earliest → 2022.3.3 | No fix stated |
Other CVEs of Jenkins Checkmarx Plugin
The 4 CVEs of Jenkins Checkmarx Plugin →
CVE-2023-35142
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by…
8.1
High
CVE-2022-25201
Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read…
Not rated
CVE-2022-25200
A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to…
Not rated