Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-30966

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-38w4-q97c-xh4x

Cross-site Scripting in Jenkins Random String Parameter Plugin Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

gitlab/maven/org.jenkins-ci.plugins/random-string-parameter/CVE-2022-30966

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.