← CVE Intelligence

CVE-2022-34172

Jenkins project / Jenkins PUBLISHED

Description (CNA)

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkinsaffected 2.340 before unspecified; affected unspecified through 2.355

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.