Visit Website →

Recent Items

fkie_cve-2022-46686

Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values.

Updated on 2026-10-11T17:55:53.772778+00:00

GHSA-5g2c-j6v9-vf94 — Jenkins Custom Build Properties Plugin vulnerable to Cross-site Scripting

Affected: Maven: io.jenkins.plugins:custom-build-properties

Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values. Custom Build Properties Plugin 2.82.v16d5b_d3590c7 escapes property values and build display names on the Custom Build Properties and Build Summary pages.

Updated on 2026-10-11T17:55:53.773770+00:00

gsd-2022-46686

gsd-2022-46686
Updated on 2026-10-11T17:55:53.773959+00:00

WID-SEC-W-2022-2262 — Jenkins: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.

Updated on 2026-10-11T17:55:53.774047+00:00