~ / search / GHSA-fcr6-6cph-vmcm

GHSA-fcr6-6cph-vmcm

Stored XSS vulnerability in Jenkins Git Parameter Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-29040

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.tools:git-parameter < 0.9.16 0.9.16

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

References

External links from the advisory. They lead to third-party sites.