En bref
- CVE-2022-27213 est une vulnérabilité MOYENNE (CVSS 5.4) touchant io.jenkins.plugins:environment-dashboard, environment dashboard (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.82%, plus élevée que 57.5% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
NVD description
Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free