~ / search / GHSA-fq2h-r2h9-pj8r

GHSA-fq2h-r2h9-pj8r

Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) High CVE-2022-41229

Packages

EcosystemPackageAffectedFixed in
Maven io.jenkins.plugins:cavisson-ns-nd-integration < 4.8.0.147 4.8.0.147

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins NS-ND Integration Performance Publisher Plugin prior to version 4.8.0.147 does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

References

External links from the advisory. They lead to third-party sites.