VDB
CVE-2022-34170
CVE-2022-34170
PUBLISHED
CVSS 5.400000095367432 MEDIUM
In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
EPSS 1.53% · 73.8th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
1.53%
73.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 2.320.0 |
| Bitnami | jenkins | 2.320.0 |
Timeline
- Jun 22, 2022 CVE Published
- Jun 23, 2022 EPSS Score
- Sep 29, 2022 EPSS Score
- Nov 16, 2022 EPSS Score
- Feb 21, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Sep 2, 2023 EPSS Score
- Oct 20, 2023 EPSS Score
- Jan 25, 2024 EPSS Score
- May 1, 2024 EPSS Score
- Jun 18, 2024 EPSS Score