Aller au contenu
Se connecter
Non notée

CVE-2022-25185 Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook,…

Description

Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Generic Webhook Trigger Plugin 1.81 premières → 1.81 Pas de correctif indiqué

Autres CVE de Jenkins Generic Webhook Trigger Plugin

Les 3 CVE de Jenkins Generic Webhook Trigger Plugin →
CVE-2022-43412 Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking… 5.3 Moyenne CVE-2021-21669 Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity… Non notée
Suivre cette CVE