CoreCVE
Back

MEDIUM

Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission

Published Apr 12, 2022

Description

Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jenkins
Published Apr 12, 2022
Updated Aug 3, 2024
Reserved Apr 11, 2022
Link CVE-2022-29044
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-29044
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-29044
ENISA EUVD
Assigner jenkins
Published Apr 12, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-1804
EUVD-2022-1804 GHSA-PV7P-C7CP-VRH3