| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.204.6, < 2.228< 2.228 | 2.228 |
| jenkins | ≤ 2.204.5≤ 2.227 |
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free