Lucene search
Veracode Vulnerability DatabaseVERACODE:39571HistoryMar 07, 2023 - 12:49 a.m.
Cross-site Scripting (XSS)
2023-03-0700:49:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
jenkins-2-plugins
cross-site scripting
http urls
test report
clickable links
stored vulnerability
item permission
configure permission
software
0.001 Low
EPSS
Percentile
33.3%
jenkins-2-plugins is vulnerable to Cross-site Scripting (XSS) attacks. The library converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
References
www.openwall.com/lists/oss-security/2022/11/15/4
access.redhat.com/errata/RHSA-2023:0777
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=2143086
docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html
www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2888
Related
osv
osv
Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion
2022-11-16 12:00:22
CVE-2022-45380
2022-11-15 20:15:11
github
github
Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion
2022-11-16 12:00:22
cve
cve
CVE-2022-45380
2022-11-15 20:15:11
cvelist
cvelist
CVE-2022-45380
2022-11-15 00:00:00
prion
prion
Cross site scripting
2022-11-15 20:15:00
cbl_mariner
cbl_mariner
CVE-2022-45380 affecting package junit 4.13-5
2024-07-05 09:08:40
alpinelinux
alpinelinux
CVE-2022-45380
2022-11-15 20:15:11
nvd
nvd
CVE-2022-45380
2022-11-15 20:15:11
redhatcve
redhatcve
CVE-2022-45380
2022-11-16 02:56:07
nessus
nessus
RHCOS 4 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-01-24 00:00:00
RHCOS 4 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)
2024-01-24 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-04-28 00:00:00
redhat
redhat