Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/jira@3.7
purl pkg:maven/org.jenkins-ci.plugins/jira@3.7
Next non-vulnerable version 3.7.1
Latest non-vulnerable version 3.12
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-u4r3-mm95-nbe3
Aliases:
CVE-2022-29041
GHSA-m3p3-2gp6-ghq8
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
3.7.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:49:48.733612+00:00 GitLab Importer Affected by VCID-u4r3-mm95-nbe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/jira/CVE-2022-29041.yml 38.0.0