CVE-2022-34173 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-34173 PUBLISHED

In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

EPSS 11.82% · 93.7th percentile

Risk Scores

EPSS Score

11.82%

93.7th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	2.340.0
Bitnami	jenkins	2.340.0

Timeline

Jun 22, 2022 CVE Published
Jun 23, 2022 EPSS Score
Aug 10, 2022 EPSS Score
Nov 13, 2022 EPSS Score
Dec 30, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 20, 2023 EPSS Score
Jul 7, 2023 EPSS Score
Oct 9, 2023 EPSS Score
Nov 25, 2023 EPSS Score
Jan 11, 2024 EPSS Score

References

Open in Interactive Console →