← CVE Intelligence

CVE-2022-34795

Jenkins project / Jenkins Deployment Dashboard Plugin PUBLISHED

Description (CNA)

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Deployment Dashboard Pluginaffected unspecified through 1.0.10; unknown next of 1.0.10 before unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.