Package · Maven

com.groupon.jenkins-ci.plugins:DotCi

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2022-41239

Stored XSS vulnerability in Jenkins DotCi Plugin

Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins DotCi Plugin com.groupon.jenkins-ci.plugins:DotCi Web / CMS Maven

Sep 21, 2022