~ / search / GHSA-35h9-h439-vvmr

GHSA-35h9-h439-vvmr

Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2022-27213

Packages

EcosystemPackageAffectedFixed in
Maven io.jenkins.plugins:environment-dashboard <= 1.1.10 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.

References

External links from the advisory. They lead to third-party sites.