CVE-2022-25185
CVE-2022-25185
Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Productos afectados
Jenkins project · Jenkins Generic Webhook Trigger Plugin¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →