CVE-2022-29045
Assigner: jenkins
Published: 2022-04-12T00:00:00
State: PUBLISHED
affected: product: Jenkins promoted builds Plugin
vendor: Jenkins project
versions: status: unaffected
version: 3.10.1
lessThanOrEqual: 873.v6149db_d64130
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.