Lucene search
HistorySep 21, 2022 - 4:15 p.m.
CVE-2022-41240
jenkins
walti api
xss
vulnerability
attackers
api responses
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.3%
Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.
Affected configurations
Node
jenkinswaltiRange≤1.0.1jenkins
Related
github
github
Stored XSS vulnerability in Jenkins Walti plugin
2022-09-22 00:00:28
cve
cve
CVE-2022-41240
2022-09-21 16:15:10
cvelist
cvelist
CVE-2022-41240
2022-09-21 15:45:59
prion
prion
Cross site scripting
2022-09-21 16:15:00
osv
osv
Stored XSS vulnerability in Jenkins Walti plugin
2022-09-22 00:00:28
nessus
nessus
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.3%
Related for NVD:CVE-2022-41240