Lucene search

K
osvGoogleOSV:GHSA-GC7Q-7VG3-H8GF
HistoryFeb 16, 2022 - 12:01 a.m.

Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin

2022-02-1600:01:19
Google
osv.dev
13

0.001 Low

EPSS

Percentile

22.0%

Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.

0.001 Low

EPSS

Percentile

22.0%

Related for OSV:GHSA-GC7Q-7VG3-H8GF