Aller au contenu
Se connecter
Non notée

CVE-2022-29037 Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views…

Description

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins CVS Plugin 2.19 premières → 2.19 Pas de correctif indiqué

Autres CVE de Jenkins CVS Plugin

Les 3 CVE de Jenkins CVS Plugin →
CVE-2020-2324 Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks Non notée CVE-2020-2184 A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and… Non notée
Suivre cette CVE