CVE-2022-36922
Assigner: jenkins
Published: 2022-07-27T14:29:29
State: PUBLISHED
affected: product: Jenkins Lucene-Search Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 370.v62a5f618cd3a
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 370.v62a5f618cd3a
versionType: custom
descriptions: value: Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.