CVE-2022-34173
CVE-2022-34173
In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Productos afectados
Jenkins project · Jenkins¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →