Lucene search
GoogleOSV:CVE-2022-34171HistoryJun 23, 2022 - 5:15 p.m.
CVE-2022-34171
2022-06-2317:15:15
Google
osv.dev
11
0.001 Low
EPSS
Percentile
22.0%
In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output generated for new symbol-based SVG icons includes the ‘title’ attribute of ‘l:ionicon’ (until Jenkins 2.334) and ‘alt’ attribute of ‘l:icon’ (since Jenkins 2.335) without further escaping, resulting in a cross-site scripting (XSS) vulnerability.
Related
alpinelinux
alpinelinux
CVE-2022-34171
2022-06-23 17:15:15
nvd
nvd
CVE-2022-34171
2022-06-23 17:15:15
osv
osv
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
BIT-jenkins-2022-34171
2024-03-06 10:57:51
veracode
veracode
Cross-site Scripting (XSS)
2022-08-20 09:46:35
cve
cve
CVE-2022-34171
2022-06-23 17:15:15
prion
prion
Cross site scripting
2022-06-23 17:15:00
cvelist
cvelist
CVE-2022-34171
2022-06-22 14:40:51
github
github
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
openvas
openvas
cnvd
cnvd
Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65922)
2022-06-27 00:00:00
redhatcve
redhatcve
CVE-2022-34171
2022-08-19 05:14:42
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (25be46f0-f25d-11ec-b62a-00e081b7aa2d)
2022-06-23 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00