VDB
CVE-2022-34170
CVE-2022-34170
PUBLISHED
In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
EPSS 1.84% · 83.3th percentile
Risk Scores
EPSS Score
1.84%
83.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 2.320.0 |
| Bitnami | jenkins | 2.320.0 |
Exploit Intelligence
Timeline
- Jun 22, 2022 CVE Published
- Jun 23, 2022 EPSS Score
- Sep 28, 2022 EPSS Score
- Nov 14, 2022 EPSS Score
- Feb 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 15, 2023 EPSS Score
- Jan 19, 2024 EPSS Score
- Apr 23, 2024 EPSS Score
- Jun 10, 2024 EPSS Score