CVE-2022-45387

CVSS v3.1 5.4 (Medium)

EPSS 0.08 % (34^th)

Affected Products 1

Advisories 2

Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build logs before rendering it on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability.

Weaknesses

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-11-15 20:15:12
(22 months ago)
Updated Date: 2023-11-01 20:06:58
(10 months ago)

Affected Products

Jenkins

Bart

Configuration #1

		CPE23	From	Up To
	Jenkins Bart for Jenkins 1.0.3 and prior versions	cpe:2.3:a:jenkins:bart::::::jenkins		<= 1.0.3