Количество 2
Количество 2
CVE-2022-45382
около 3 лет назад
Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered via Retry action, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to edit build display names.
CVSS3: 5.4
EPSS: Низкий
GHSA-h8hf-hxx6-5g6v
около 3 лет назад
Cross-site Scripting in Jenkins Naginator Plugin
CVSS3: 5.4
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-45382 Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered via Retry action, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to edit build display names. | CVSS3: 5.4 | 9% Низкий | около 3 лет назад | |
GHSA-h8hf-hxx6-5g6v Cross-site Scripting in Jenkins Naginator Plugin | CVSS3: 5.4 | 9% Низкий | около 3 лет назад |
Уязвимостей на страницу
20