~ / search / GHSA-2463-7265-h8r4

GHSA-2463-7265-h8r4

Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS

Source: GitHub Advisory Database (reviewed) High CVE-2022-34788

Packages

EcosystemPackageAffectedFixed in
Maven net.praqma:matrix-reloaded <= 1.1.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Matrix Reloaded Plugin 1.1.3 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

References

External links from the advisory. They lead to third-party sites.