Lucene search

K
osvGoogleOSV:GHSA-FXJ8-CQCP-3VGQ
HistoryMay 17, 2022 - 3:53 a.m.

Jenkins cross-site scripting (XSS) vulnerability

2022-05-1703:53:42
Google
osv.dev
9
cross-site scripting
jenkins
vulnerability
remote attackers
web script
html
iconsize_cookie
software

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.9%

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.9%