Lucene search
China National Vulnerability DatabaseCNVD-2022-65924HistoryJun 27, 2022 - 12:00 a.m.
Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65924)
2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.001 Low
EPSS
Percentile
22.0%
Jenkins is an application of the Jenkins open source. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins suffers from a cross-site scripting vulnerability that stems from the fact that the help icon does not escape the name of a feature that is part of its tooltip. An attacker could exploit the vulnerability to execute JavaScript code on the client side.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Jenkins Jenkins >LTS 2.332.1,<=LTS | eq | 2.332.3 | |
| Jenkins Jenkins >2.320， | le | 2.355 |
Related
cvelist
cvelist
CVE-2022-34170
2022-06-22 14:40:50
prion
prion
Cross site scripting
2022-06-23 17:15:00
osv
osv
BIT-jenkins-2022-34170
2024-03-06 10:58:03
CVE-2022-34170
2022-06-23 17:15:15
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
alpinelinux
alpinelinux
CVE-2022-34170
2022-06-23 17:15:15
redhatcve
redhatcve
CVE-2022-34170
2022-08-19 05:14:33
openvas
openvas
nvd
nvd
CVE-2022-34170
2022-06-23 17:15:15
cve
cve
CVE-2022-34170
2022-06-23 17:15:15
github
github
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
veracode
veracode
Cross-site Scripting (XSS)
2022-08-20 09:46:18
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (25be46f0-f25d-11ec-b62a-00e081b7aa2d)
2022-06-23 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00