Lucene search
PRIOn knowledge basePRION:CVE-2022-34173HistoryJun 23, 2022 - 5:15 p.m.
Cross site scripting
2022-06-2317:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
22.0%
In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Related
alpinelinux
alpinelinux
CVE-2022-34173
2022-06-23 17:15:15
osv
osv
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
BIT-jenkins-2022-34173
2024-03-06 10:57:32
CVE-2022-34173
2022-06-23 17:15:15
cve
cve
CVE-2022-34173
2022-06-23 17:15:15
cnvd
cnvd
Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65927)
2022-06-27 00:00:00
nvd
nvd
CVE-2022-34173
2022-06-23 17:15:15
cvelist
cvelist
CVE-2022-34173
2022-06-22 14:40:54
github
github
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
redhatcve
redhatcve
CVE-2022-34173
2022-08-19 05:15:02
veracode
veracode
Cross-site Scripting (XSS)
2022-08-20 09:48:13
openvas
openvas
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (25be46f0-f25d-11ec-b62a-00e081b7aa2d)
2022-06-23 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00