Jenkins Date Parameter Plugin

1 result · Clear filters · Feed

• High 8.0
  CVE-2022-34185

  Cross-site Scripting in Jenkins Date Parameter Plugin

  Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

  Jenkins Project Jenkins Date Parameter Plugin me.leejay.jenkins:date-parameter Web / CMS Maven
  Jun 22, 2022