Kurz gesagt
- CVE-2022-41225 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in org.jenkins-ci.plugins:anchore-container-scanner, anchore container image scanner (jenkins).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.72%, höher als bei 54.1% aller Schwachstellen.
- Abhilfe: auf 1.0.25 oder neuer aktualisieren.
Description
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.
NVD description
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.
Weitere Schwachstellen in org.jenkins-ci.plugins:anchore-container-scanner
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free