Stored XSS vulnerability in Matrix Project Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-20615 · ADVISORY
• jenkinsci/matrix-project-plugin commit 78cc605 · WEB
• CVEProject/cvelist · WEB
• jenkinsci/matrix-project-plugin · PACKAGE
• jenkins.io/security/advisory/2022-01-12 · WEB
• oracle.com/security-alerts/cpuapr2022.html · WEB
• openwall.com/lists/oss-security/2022/01/12/6 · WEB

org.jenkins-ci.plugins:matrix-project のその他の脆弱性

• CVE-2024-23900中 4.3Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allo…
• CVE-2020-2225中 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple…
• CVE-2020-2224中 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single…
• CVE-2019-1003031緊急 9.9A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScript…