Persistent XSS vulnerability in Jenkins DRY Plugin

2022-05-1700:29:01

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

CPENameOperatorVersion
org.jvnet.hudson.plugins:dryeq2.38
org.jvnet.hudson.plugins:dryeq1.6
org.jvnet.hudson.plugins:dryeq2.12
org.jvnet.hudson.plugins:dryeq2.30
org.jvnet.hudson.plugins:dryeq2.9
org.jvnet.hudson.plugins:dryeq1.8
org.jvnet.hudson.plugins:dryeq2.39
org.jvnet.hudson.plugins:dryeq2.19
org.jvnet.hudson.plugins:dryeq1.5
org.jvnet.hudson.plugins:dryeq1.10

Name	Operator	Version
org.jvnet.hudson.plugins:dry	eq	2.38
org.jvnet.hudson.plugins:dry	eq	1.6
org.jvnet.hudson.plugins:dry	eq	2.12
org.jvnet.hudson.plugins:dry	eq	2.30
org.jvnet.hudson.plugins:dry	eq	2.9
org.jvnet.hudson.plugins:dry	eq	1.8
org.jvnet.hudson.plugins:dry	eq	2.39
org.jvnet.hudson.plugins:dry	eq	2.19
org.jvnet.hudson.plugins:dry	eq	1.5
org.jvnet.hudson.plugins:dry	eq	1.10