Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

redhat логотип

CVE-2022-34170

около 4 лет назад

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2022-34170

около 4 лет назад

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2022-34170

около 4 лет назад

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 throug ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-62wf-24c4-8r76

около 4 лет назад

Cross-site Scripting vulnerability in Jenkins

CVSS3: 8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2022-34170

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CVSS3: 6.1
1%
Низкий
около 4 лет назад
nvd логотип
CVE-2022-34170

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CVSS3: 5.4
1%
Низкий
около 4 лет назад
debian логотип
CVE-2022-34170

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 throug ...

CVSS3: 5.4
1%
Низкий
около 4 лет назад
github логотип
GHSA-62wf-24c4-8r76

Cross-site Scripting vulnerability in Jenkins

CVSS3: 8
1%
Низкий
около 4 лет назад

Уязвимостей на страницу