CVE-2022-30967

Summary

Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Selection tasks Pluginunspecified <= 1.0affected
Jenkins projectJenkins Selection tasks Pluginnext of 1.0 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References