Non notée
CVE-2022-27196 Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a…
Description
Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Favorite Plugin 2.4 | premières → 2.4.0 | Pas de correctif indiqué |
| Jenkins Favorite Plugin 2.3 | premières → < 2.3.3.1 | 2.3.3.1 |