~ / search / GHSA-7rrx-375m-j6cr

GHSA-7rrx-375m-j6cr

Cross-site Scripting in Jenkins Deployment Dashboard Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2022-34795

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:ec2-deployment-dashboard <= 1.0.10 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission. As of publication of this advisory, there is no fix.

References

External links from the advisory. They lead to third-party sites.