CVE-2022-34783

CVE-2022-34783: vulnerability in Jenkins Plot Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Plot Plugin+ Monitor org.jenkins-ci.plugins:plot

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 82%
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products
Jenkins project · Jenkins Plot Plugin