Product · Jenkins Project

Jenkins Spring Config Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2022-46687

Cross-site Scripting in Jenkins Spring Config Plugin

Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to change build display names.

Jenkins Project Jenkins Spring Config Plugin io.jenkins.plugins:spring-config Web / CMS Maven

Dec 7, 2022