org.jenkins-ci.plugins:naginator

1 result · Feed

• Medium 5.4
  CVE-2022-45382

  Cross-site Scripting in Jenkins Naginator Plugin

  Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered via Retry action, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to edit build display names.

  Jenkins Project Jenkins Naginator Plugin org.jenkins-ci.plugins:naginator Web / CMS Maven
  Nov 15, 2022