Executive brief
Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin
Affected products
- Maven io.jenkins.plugins:cavisson-ns-nd-integration
Junglewise Threat Intelligence
CVE-2022-34191: Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin
CVE-2022-34191 · Severity: low · CVSS 3.1 · Published 2022-06-24
Technologies: io.jenkins.plugins:cavisson-ns-nd-integration (Maven). Vendors: Maven.
Related threats
- Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
- Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin
- Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally
- Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
- Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery