← CVE Intelligence

CVE-2022-30960

Jenkins project / Jenkins Application Detector Plugin PUBLISHED

Description (CNA)

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Application Detector Pluginaffected unspecified through 1.0.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.