Junglewise Threat Intelligence

CVE-2022-27200: Stored Cross-site Scripting in folder-auth plugin

CVE-2022-27200 · Severity: low · CVSS 3.1 · Published 2022-03-18

Technologies: io.jenkins.plugins:folder-auth (Maven). Vendors: Maven.

Executive brief

Stored Cross-site Scripting in folder-auth plugin

Affected products

Maven io.jenkins.plugins:folder-auth

Related threats

Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
Duplicate Advisory: Stored Cross-site Scripting vulnerability in Jenkins Folder-based Authorization Strategy Plugin