Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-27207
HistoryMar 15, 2022 - 5:15 p.m.

Cross site scripting

2022-03-1517:15:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

22.0%

Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the ‘Global Build Stats’ page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.

CPENameOperatorVersion
global-build-statsle1.5

0.001 Low

EPSS

Percentile

22.0%

Related for PRION:CVE-2022-27207