Non notée

CVE-2022-27197 Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source…

Description

Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure views.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Dashboard View Plugin 2.18	premières → 2.18	Pas de correctif indiqué
Jenkins Dashboard View Plugin 2.17	premières → < 2.17.1	2.17.1
Jenkins Dashboard View Plugin 2.16	premières → < 2.16.1	2.16.1

Les 3 CVE de Jenkins Dashboard View Plugin →

CVE-2021-21649 Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in… Non notée CVE-2019-10396 Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting… Non notée

Vous utilisez Jenkins Dashboard View Plugin ?

Suivre cette CVE Surveiller Jenkins Dashboard View Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2022-27197

Chronologie

Publiée 15 mars 2022
Dernière modification 3 août 2024

Références

www.jenkins.io www.jenkins.io
[oss-security] 20220315 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Suivre cette CVE

CVE-2022-27197 Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source…

Description

Produits et versions touchés

Autres CVE de Jenkins Dashboard View Plugin