CVE-2022-34790
Assigner: jenkins
Published: 2022-06-30T17:47:07
State: PUBLISHED
affected: product: Jenkins eXtreme Feedback Panel Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 2.0.1
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 2.0.1
versionType: custom
descriptions: value: Jenkins eXtreme Feedback Panel Plugin 2.0.1 and earlier does not escape the job names used in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.