En resumen
- CVE-2022-34795 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a org.jenkins-ci.plugins:ec2-deployment-dashboard, deployment dashboard (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.3% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
As of publication of this advisory, there is no fix.
NVD description
Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
Más vulnerabilidades de org.jenkins-ci.plugins:ec2-deployment-dashboard
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free