Aller au contenu
Se connecter
5.4 Moyenne

CVE-2022-41239 Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications…

Description

Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins DotCi Plugin 2.40 premières → 2.40.00 Pas de correctif indiqué

Autres CVE de Jenkins DotCi Plugin

Les 3 CVE de Jenkins DotCi Plugin →
CVE-2022-41238 A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger… 9.8 Critique CVE-2022-41237 Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary… 9.8 Critique
Suivre cette CVE