CVE-2022-38664

Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a…

published August 23, 2022

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure job names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00709 · 53.0th percentile
Published
2022-08-23T16:45Z
EPSS history
Timeline
  • 23 AUG 16:45Z
    Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a…
    cvelistv5