Lucene search

K
osvGoogleOSV:GHSA-9RHC-VJJP-GCCW
HistoryMay 24, 2022 - 5:28 p.m.

Stored XSS vulnerability in Locked Files Report Plugin

2022-05-2417:28:26
Google
osv.dev
10
xss
vulnerability
jenkins

EPSS

0.001

Percentile

22.0%

Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files’ names in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-9RHC-VJJP-GCCW