Lucene search

K
osvGoogleOSV:GHSA-5C6C-W4C4-VGVX
HistoryJan 06, 2022 - 6:45 p.m.

Stored XSS vulnerability in Jenkins Scriptler Plugin

2022-01-0618:45:09
Google
osv.dev
14
jenkins
scriptler plugin
xss
vulnerability
exploit
permission
software

EPSS

0.001

Percentile

22.0%

Jenkins Scriptler Plugin 3.1 and earlier does not escape script content.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.

Jenkins Scriptler Plugin 3.2 escapes script content.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-5C6C-W4C4-VGVX