Package · Maven

org.jenkins-ci.plugins:nested-view

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.8

CVE-2022-34182

Reflected Cross-site Scripting in Jenkins Nested View Plugin

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins Nested View Plugin org.jenkins-ci.plugins:nested-view Web / CMS Maven

Jun 22, 2022
High 7.1

CVE-2021-21680

XXE vulnerability in Jenkins Nested View Plugin

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Nested View Plugin org.jenkins-ci.plugins:nested-view Web / CMS Maven

Aug 31, 2021