Lucene search

K
osvGoogleOSV:GHSA-V46Q-XJP5-7P6R
HistoryMay 24, 2022 - 5:27 p.m.

Stored XSS vulnerability in Jenkins Cadence vManager Plugin

2022-05-2417:27:07
Google
osv.dev
10
jenkins
cadence vmanager plugin
stored xss vulnerability
tooltips
cross-site scripting
attackers
run/update permission
software

EPSS

0.001

Percentile

22.0%

Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

Cadence vManager Plugin 3.0.5 removes affected tooltips.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-V46Q-XJP5-7P6R