~ / search / GHSA-h642-5h74-3x9c

GHSA-h642-5h74-3x9c

Reflected Cross-site Scripting in Jenkins Nested View Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2022-34182

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:nested-view >= 1.20, < 1.26 1.26

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability. Nested View Plugin 1.26 escapes search parameters

References

External links from the advisory. They lead to third-party sites.