Lucene search
GoogleOSV:GHSA-RVG5-F5FJ-MXVGHistoryApr 13, 2022 - 12:00 a.m.
Cross-site Scripting in Jenkins Credentials Plugin
2022-04-1300:00:18
Google
osv.dev
12
0.001 Low
EPSS
Percentile
22.2%
Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Related
github
github
Cross-site Scripting in Jenkins Credentials Plugin
2022-04-13 00:00:18
checkpoint_advisories
checkpoint_advisories
Jenkins Credentials Plugin Cross-site Scripting (CVE-2022-29036)
2022-07-11 00:00:00
osv
osv
CVE-2022-29036
2022-04-12 20:15:09
nvd
nvd
CVE-2022-29036
2022-04-12 20:15:09
cvelist
cvelist
CVE-2022-29036
2022-04-12 00:00:00
cnvd
cnvd
Jenkins Credentials Plugin Cross-Site Scripting Vulnerability
2022-04-13 00:00:00
redhatcve
redhatcve
CVE-2022-29036
2022-04-13 09:22:34
cve
cve
CVE-2022-29036
2022-04-12 20:15:09
veracode
veracode
Cross-site Scripting(XSS)
2022-06-03 14:55:26
prion
prion
Cross site scripting
2022-04-12 20:15:00
redhat
redhat
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)
2022-09-08 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.52 paackages (RHSA-2022:4909)
2022-09-08 00:00:00
RHEL 7 : OpenShift Container Platform 3.11.705 (RHSA-2022:2280)
2022-09-08 00:00:00