CVE-2022-34172 PUBLISHED

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

EPSS 6.40% · 91.0th percentile

Risk Scores

EPSS Score
6.40%
91.0th percentile

Affected Products

VendorProductVersions
Bitnamijenkins2.340.0
Bitnamijenkins2.340.0

Timeline

References

Open in Interactive Console →