← CVE Intelligence

CVE-2022-30956

Jenkins project / Jenkins Rundeck Plugin PUBLISHED

Description (CNA)

Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Rundeck Pluginaffected unspecified through 3.6.10

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.