Lucene search
Veracode Vulnerability DatabaseVERACODE:36765HistoryAug 20, 2022 - 9:46 a.m.
Cross-site Scripting (XSS)
2022-08-2009:46:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
jenkins
xss
vulnerability
help icon
tooltip
arbitrary javascript
software
0.001 Low
EPSS
Percentile
22.0%
jenkins is vulnerable to cross-site scripting. The vulnerability exists because the help icon does not escape the feature name that is part of its tooltip which allows an attacker to inject and execute arbitrary javascript.
Related
cvelist
cvelist
CVE-2022-34170
2022-06-22 14:40:50
prion
prion
Cross site scripting
2022-06-23 17:15:00
osv
osv
BIT-jenkins-2022-34170
2024-03-06 10:58:03
CVE-2022-34170
2022-06-23 17:15:15
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
alpinelinux
alpinelinux
CVE-2022-34170
2022-06-23 17:15:15
redhatcve
redhatcve
CVE-2022-34170
2022-08-19 05:14:33
openvas
openvas
nvd
nvd
CVE-2022-34170
2022-06-23 17:15:15
cve
cve
CVE-2022-34170
2022-06-23 17:15:15
github
github
Cross-site Scripting vulnerability in Jenkins
2022-06-24 00:00:31
cnvd
cnvd
Jenkins Cross-Site Scripting Vulnerability (CNVD-2022-65924)
2022-06-27 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (25be46f0-f25d-11ec-b62a-00e081b7aa2d)
2022-06-23 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00