Lucene search
China National Vulnerability DatabaseCNVD-2022-65922HistoryJun 27, 2022 - 12:00 a.m.
Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65922)
2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.001 Low
EPSS
Percentile
22.0%
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins suffers from a cross-site scripting vulnerability that stems from the title attribute and alt attribute not being further escaped in a page. An attacker could exploit the vulnerability to execute JavaScript code on the client side.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Jenkins Jenkins >2.321, | le | 2.355 | |
| Jenkins Jenkins >LTS 2.332.1,<=LTS | eq | 2.332.3 |
Related
cve
cve
CVE-2022-34171
2022-06-23 17:15:15
cvelist
cvelist
CVE-2022-34171
2022-06-22 14:40:51
prion
prion
Cross site scripting
2022-06-23 17:15:00
alpinelinux
alpinelinux
CVE-2022-34171
2022-06-23 17:15:15
nvd
nvd
CVE-2022-34171
2022-06-23 17:15:15
osv
osv
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
BIT-jenkins-2022-34171
2024-03-06 10:57:51
CVE-2022-34171
2022-06-23 17:15:15
veracode
veracode
Cross-site Scripting (XSS)
2022-08-20 09:46:35
github
github
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
openvas
openvas
redhatcve
redhatcve
CVE-2022-34171
2022-08-19 05:14:42
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (25be46f0-f25d-11ec-b62a-00e081b7aa2d)
2022-06-23 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00