En bref
- CVE-2022-41225 est une vulnérabilité MOYENNE (CVSS 5.4) touchant org.jenkins-ci.plugins:anchore-container-scanner, anchore container image scanner (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.72%, plus élevée que 54.1% des vulnérabilités.
- Correctif : mettre à jour vers 1.0.25 ou plus récent.
Description
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.
NVD description
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.
Autres vulnérabilités de org.jenkins-ci.plugins:anchore-container-scanner
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free