Non notée

CVE-2022-29045 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description…

Description

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins promoted builds Plugin 3.10	premières → < 3.10.1	3.10.1

Les 3 CVE de Jenkins promoted builds Plugin →

CVE-2022-29049 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of… Non notée CVE-2021-21641 A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers… Non notée

Vous utilisez Jenkins promoted builds Plugin ?

Suivre cette CVE Surveiller Jenkins promoted builds Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2022-29045

Chronologie

Publiée 12 avril 2022
Dernière modification 3 août 2024

Références

www.jenkins.io www.jenkins.io

Suivre cette CVE

CVE-2022-29045 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description…

Description

Produits et versions touchés

Autres CVE de Jenkins promoted builds Plugin