Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published: 2022-06-22T14:41:30

Updated: 2024-08-03T08:16:17.281Z

Reserved: 2022-06-21T00:00:00

Link: CVE-2022-34196

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-06-23T17:15:16.920

Modified: 2023-12-21T03:19:57.490

Link: CVE-2022-34196

cve-icon Redhat

No data.