Executive brief
Cross-site Scripting in Jenkins Job Configuration History Plugin
Affected products
- Maven org.jenkins-ci.plugins:jobConfigHistory
Junglewise Threat Intelligence
CVE-2022-38664: Cross-site Scripting in Jenkins Job Configuration History Plugin
CVE-2022-38664 · Severity: low · CVSS 3.1 · Published 2022-08-24
Technologies: org.jenkins-ci.plugins:jobConfigHistory (Maven). Vendors: Maven.
Related threats
- Jenkins Job Configuration History Plugin information disclosure in configuration history
- XSS vulnerability in Jenkins Job Configuration History Plugin
- Path traversal in Jenkins Job Configuration History Plugin
- Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability
- Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin