Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published: 2022-06-22T14:41:12

Updated: 2024-08-03T08:16:17.198Z

Reserved: 2022-06-21T00:00:00

Link: CVE-2022-34184

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-06-23T17:15:16.123

Modified: 2023-11-03T02:41:58.117

Link: CVE-2022-34184

cve-icon Redhat

No data.