Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55655
HistoryJun 24, 2022 - 12:00 a.m.

Jenkins Stash Branch Parameter Plugin跨站脚本漏洞

2022-06-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

0.001 Low

EPSS

Percentile

22.0%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exists in Jenkins Stash Branch Parameter Plugin version 0.3.0 and earlier. The vulnerability stems from a failure to escape the name and description of Stash Branch parameters on the view where the parameters are displayed, and can be exploited by attackers to execute JavaScript code on the client side.

0.001 Low

EPSS

Percentile

22.0%

Related for CNVD-2022-55655