Lucene search
PRIOn knowledge basePRION:CVE-2022-41225HistorySep 21, 2022 - 4:15 p.m.
Cross site scripting
2022-09-2116:15:00
PRIOn knowledge base
www.prio-n.com
1
jenkins
anchore
xss
0.001 Low
EPSS
Percentile
33.3%
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.
| CPE | Name | Operator | Version |
|---|---|---|---|
| anchore_container_image_scanner | lt | 1.0.25 |
Related
cvelist
cvelist
CVE-2022-41225
2022-09-21 15:45:47
cve
cve
CVE-2022-41225
2022-09-21 16:15:09
osv
osv
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
2022-09-22 00:00:28
CVE-2022-41225
2022-09-21 16:15:09
nvd
nvd
CVE-2022-41225
2022-09-21 16:15:09
github
github
nessus
nessus
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00