Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79926
HistoryApr 13, 2022 - 12:00 a.m.

Jenkins Credentials Plugin Cross-Site Scripting Vulnerability

2022-04-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

22.2%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exists in Jenkins Credentials Plugin, which stems from the application not escaping the name and description of the Credentials parameter on the view where the parameter is displayed. No detailed vulnerability details are available at this time.