CVE-2022-27213: vulnerability in Jenkins Environment Dashboard Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Environment Dashboard Plugin+ Monitor io.jenkins.plugins:environment-dashboard
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.8%
Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
Affected products
Jenkins project · Jenkins Environment Dashboard Plugin