Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-65927
HistoryJun 27, 2022 - 12:00 a.m.

Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65927)

2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

22.0%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins versions 2.340 through 2.355 contain a cross-site scripting vulnerability that stems from the tooling of the build button in the list view not escaping the job display name. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
Jenkins Jenkins >=2.340,le2.355