Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34157 State: PUBLISHED Published: 2023-02-16T20:00:09.598Z Last Updated: 2025-01-27T18:19:05.057Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html
CVE ID: CVE-2022-34158 State: PUBLISHED Published: 2022-08-04T06:16:11 Last Updated: 2024-08-03T08:16:17.225Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: CSRF group privilege escalation Description: A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow a group privilege escalation of the attacker's account. Further examination of this issue established that it could also be used to modify the email associated with the attacked account, and then a reset password request from the login page. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apa
d request from the login page. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-34158
CVE ID: CVE-2022-34159 State: PUBLISHED Published: 2024-12-20T01:58:41.400Z Last Updated: 2024-12-24T00:40:27.856Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: CV81-WDM FW Problem Types: CWE-20 Description: Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnerability ID: HWPSIRT-2022-80078) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-34159. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220620-01-6e028b61-en
CVE ID: CVE-2022-34160 State: PUBLISHED Published: 2022-07-08T17:00:22.463535Z Last Updated: 2024-09-16T22:03:13.614Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/I:L/C:L/UI:R/S:U/AV:N/PR:N/A:N/RL:O/E:U/RC:C) Vendors: IBM Products: CICS TX Advanced, CICS TX Standard Problem Types: Gain Access Description: IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 229330. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601553 - https://www.ibm.com/s
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601553 - https://www.ibm.com/support/pages/node/6601555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229330
CVE ID: CVE-2022-34161 State: PUBLISHED Published: 2022-08-01T15:40:38.196927Z Last Updated: 2024-09-16T17:02:44.921Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:L/AV:N/C:N/UI:R/PR:N/AC:L/S:U/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: CICS TX Advanced, CICS TX Standard Problem Types: Gain Access Description: IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 229331. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608192 - https://www.ibm.com/support/pages/node/6608194 - https://exchange.xforce.
tps://www.ibm.com/support/pages/node/6608192 - https://www.ibm.com/support/pages/node/6608194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229331
CVE ID: CVE-2022-34162 State: PUBLISHED Published: 2022-08-01T15:40:54.843533Z Last Updated: 2024-09-17T03:27:25.041Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/C:L/I:L/A:N/S:C/AC:L/UI:R/PR:L/RC:C/E:U/RL:O) Vendors: IBM Products: CICS TX Standard, CICS TX Advanced Problem Types: Gain Access Description: IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 229332. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.co
the victim. IBM X-Force ID: 229332. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608198 - https://www.ibm.com/support/pages/node/6608196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229332
CVE ID: CVE-2022-34163 State: PUBLISHED Published: 2022-08-01T15:41:08.760486Z Last Updated: 2024-09-16T17:47:57.765Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/UI:N/S:U/AC:L/A:N/I:L/C:L/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: CICS TX Standard, CICS TX Advanced Problem Types: Gain Access Description: IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 229333. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/
X-Force ID: 229333. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608200 - https://www.ibm.com/support/pages/node/6608202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229333
CVE ID: CVE-2022-34164 State: PUBLISHED Published: 2022-08-01T15:41:23.027170Z Last Updated: 2024-09-17T03:13:05.565Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/C:L/AV:L/I:L/A:L/S:U/AC:L/PR:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: CICS TX Standard, CICS TX Advanced Problem Types: Gain Privileges Description: IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608204 - https://www.ibm.com/support/pages/node/6608206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229338
CVE ID: CVE-2022-34165 State: PUBLISHED Published: 2022-09-09T16:00:15.228171Z Last Updated: 2024-09-17T00:32:21.129Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:N/PR:L/I:L/A:N/C:L/AV:N/AC:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: WebSphere Application Server, WebSphere Application Server Liberty Problem Types: Gain Access Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429. Add
s attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6618747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229429
CVE ID: CVE-2022-34166 State: PUBLISHED Published: 2022-07-08T17:00:27.937898Z Last Updated: 2024-09-17T03:38:48.781Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/UI:R/PR:L/S:C/AV:N/AC:L/C:L/I:L/RC:C/RL:O/E:H) Vendors: IBM Products: CICS TX Advanced, CICS TX Standard Problem Types: Cross-Site Scripting Description: IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support
on. IBM X-Force ID: 229430. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601579 - https://www.ibm.com/support/pages/node/6601609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229430
CVE ID: CVE-2022-34167 State: PUBLISHED Published: 2022-07-08T17:00:35.886383Z Last Updated: 2024-09-17T01:01:13.369Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AV:N/S:C/PR:L/A:N/AC:L/I:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: CICS TX Standard, CICS TX Advanced Problem Types: Cross-Site Scripting Description: IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229432. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/
d session. IBM X-Force ID: 229432. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6601655 - https://www.ibm.com/support/pages/node/6601657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/229432
CVE ID: CVE-2022-34169 State: PUBLISHED Published: 2022-07-19T00:00:00.000Z Last Updated: 2025-02-13T16:32:44.088Z Vendors: Apache Software Foundation Products: Apache Xalan-J Problem Types: integer truncation Description: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/
kaged copies of Xalan. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/2qvl7r43wb4t8p9dd9om1bnkssk07sn8 - https://lists.apache.org/thread/12pxy4phsry6c34x2ol4fft6xlho4kyw - http://www.openwall.com/lists/oss-security/2022/07/19/5 - https://www.oracle.com/security-alerts/cpujul2022.html - http://www.openwall.com/lists/oss-security/2022/07/19/6 - http://www.openwall.com/lists/oss-security/2022/07/20/2 - http://www.openwall.com/lists/oss-security/2022/07/20/3 - https://www.debian.org/security/2022/dsa-5188 - https://www.debian.org/security/2022/dsa-5192 - https://security.netapp.com/advisory/ntap-20220729-0009/ - https://lists.fedoraproject.org/ar
g/security/2022/dsa-5192 - https://security.netapp.com/advisory/ntap-20220729-0009/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KO3DXNKZ4EU3UZBT6AAR4XRKCD73KLMO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3EVGR7FD3ZLV5SBTJXUIDCMSK4QUE2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YULPNO3PAWMEQQZV2C54I3H3ZOXFZUTB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5OZNAZJ4YHLOKRRRZSWRT5OJ25E4XLM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
e/I5OZNAZJ4YHLOKRRRZSWRT5OJ25E4XLM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3XPOTPPBZIPFBZHQE5E7OW6PDACUMCJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4YNJSJ64NPCNKFPNBYITNZU5H3L4D6L/ - http://packetstormsecurity.com/files/168186/Xalan-J-XSLTC-Integer-Truncation.html - http://www.openwall.com/lists/oss-security/2022/10/18/2 - https://lists.debian.org/debian-lts-announce/2022/10/msg00024.html - https://www.debian.org/security/2022/dsa-5256 - http://www.openwall.com/lists/oss-security/2022/11/04/8 - http://www.openwall.com/lists/oss-security/2022/11/07/2 - https://security.gent
ll.com/lists/oss-security/2022/11/04/8 - http://www.openwall.com/lists/oss-security/2022/11/07/2 - https://security.gentoo.org/glsa/202401-25 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2022-34170 State: PUBLISHED Published: 2022-06-22T14:40:50 Last Updated: 2024-08-03T08:16:17.207Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2781
CVE ID: CVE-2022-34171 State: PUBLISHED Published: 2022-06-22T14:40:51 Last Updated: 2024-08-03T08:16:17.200Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output generated for new symbol-based SVG icons includes the 'title' attribute of 'l:ionicon' (until Jenkins 2.334) and 'alt' attribute of 'l:icon' (since Jenkins 2.335) without further escaping, resulting in a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2781
CVE ID: CVE-2022-34172 State: PUBLISHED Published: 2022-06-22T14:40:53 Last Updated: 2024-08-03T08:16:17.202Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2781
CVE ID: CVE-2022-34173 State: PUBLISHED Published: 2022-06-22T14:40:54 Last Updated: 2024-08-03T08:16:17.034Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2781
CVE ID: CVE-2022-34174 State: PUBLISHED Published: 2022-06-22T14:40:56 Last Updated: 2024-08-03T08:16:17.136Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2566
CVE ID: CVE-2022-34175 State: PUBLISHED Published: 2022-06-22T14:40:57 Last Updated: 2024-08-03T08:16:17.220Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2777
CVE ID: CVE-2022-34176 State: PUBLISHED Published: 2022-06-22T00:00:00 Last Updated: 2024-08-03T08:16:17.216Z Vendors: Jenkins project Products: Jenkins JUnit Plugin Description: Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2760
CVE ID: CVE-2022-34177 State: PUBLISHED Published: 2022-06-22T00:00:00 Last Updated: 2024-08-03T08:16:17.208Z Vendors: Jenkins project Products: Jenkins Pipeline: Input Step Plugin Description: Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside a build-related directory, allowing attackers able to configure Pipelines to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content. Additional Analyst Notes: - CVE Program Container: References: -
ontroller file system with attacker-specified content. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2705
CVE ID: CVE-2022-34178 State: PUBLISHED Published: 2022-06-22T14:41:03 Last Updated: 2024-08-03T08:16:17.213Z Vendors: Jenkins project Products: Jenkins Embeddable Build Status Plugin Description: Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2567
CVE ID: CVE-2022-34179 State: PUBLISHED Published: 2022-06-22T14:41:04 Last Updated: 2024-08-03T08:16:17.136Z Vendors: Jenkins project Products: Jenkins Embeddable Build Status Plugin Description: Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2792
CVE ID: CVE-2022-34180 State: PUBLISHED Published: 2022-06-22T14:41:06 Last Updated: 2024-08-03T08:16:17.217Z Vendors: Jenkins project Products: Jenkins Embeddable Build Status Plugin Description: Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2794
CVE ID: CVE-2022-34181 State: PUBLISHED Published: 2022-06-22T14:41:08 Last Updated: 2024-08-03T08:16:17.220Z Vendors: Jenkins project Products: Jenkins xUnit Plugin Description: Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2549
CVE ID: CVE-2022-34182 State: PUBLISHED Published: 2022-06-22T14:41:09 Last Updated: 2024-08-03T08:16:17.200Z Vendors: Jenkins project Products: Jenkins Nested View Plugin Description: Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2768
CVE ID: CVE-2022-34183 State: PUBLISHED Published: 2022-06-22T14:41:11 Last Updated: 2024-08-03T08:16:17.206Z Vendors: Jenkins project Products: Jenkins Agent Server Parameter Plugin Description: Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34184 State: PUBLISHED Published: 2022-06-22T14:41:12 Last Updated: 2024-08-03T08:16:17.198Z Vendors: Jenkins project Products: Jenkins CRX Content Package Deployer Plugin Description: Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34185 State: PUBLISHED Published: 2022-06-22T14:41:14 Last Updated: 2024-08-03T08:16:17.244Z Vendors: Jenkins project Products: Jenkins Date Parameter Plugin Description: Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34186 State: PUBLISHED Published: 2022-06-22T14:41:15 Last Updated: 2024-08-03T08:16:17.127Z Vendors: Jenkins project Products: Jenkins Dynamic Extended Choice Parameter Plugin Description: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34187 State: PUBLISHED Published: 2022-06-22T14:41:17 Last Updated: 2024-08-03T08:16:17.215Z Vendors: Jenkins project Products: Jenkins Filesystem List Parameter Plugin Description: Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34188 State: PUBLISHED Published: 2022-06-22T14:41:19 Last Updated: 2024-08-03T08:16:17.183Z Vendors: Jenkins project Products: Jenkins Hidden Parameter Plugin Description: Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784