Executive brief
Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin
Affected products
- Maven org.jenkins-ci.plugins:extended-choice-parameter
Junglewise Threat Intelligence
CVE-2022-29038: Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin
CVE-2022-29038 · Severity: low · CVSS 3.1 · Published 2022-04-13
Technologies: org.jenkins-ci.plugins:extended-choice-parameter (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF
- Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin
- Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin
- CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF