Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66007
HistoryJun 24, 2022 - 12:00 a.m.

Jenkins Maven Metadata for CI server Plugin Cross-Site Scripting Vulnerability

2022-06-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
jenkins
maven
metadata
ci server
plugin
cross-site scripting
vulnerability
javascript
attack

EPSS

0.001

Percentile

22.0%

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. a cross-site scripting vulnerability exists in Jenkins Maven Metadata for CI server Plugin version 2.1 and earlier. The vulnerability stems from a failure to escape the name and description of the List maven artifact versions parameter on the view where the parameter is displayed, which can be exploited by an attacker to execute JavaScript code on the client side.

EPSS

0.001

Percentile

22.0%

Related for CNVD-2022-66007