https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:28:04 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2022-34170 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2022-34170 https://cve.radiocsirt.org/vuln/euvd-2026-17772 EUVD-2026-17772 https://cve.radiocsirt.org/vuln/euvd-2026-17772 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34170 <p>In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> <p>In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34170 https://cve.radiocsirt.org/vuln/ghsa-62wf-24c4-8r76 <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Since Jenkins 2.320 and LTS 2.332.1, help icon tooltips no longer escape the feature name, effectively undoing the fix for [SECURITY-1955](https://www.jenkins.io/security/advisory/2020-08-12/#SECURITY-1955).</p> <p>This vulnerability is known to be exploitable by attackers with Job/Configure permission.</p> <p>Jenkins 2.356, LTS 2.332.4 and LTS 2.346.1 addresses this vulnerability, the feature name in help icon tooltips is now escaped.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Since Jenkins 2.320 and LTS 2.332.1, help icon tooltips no longer escape the feature name, effectively undoing the fix for [SECURITY-1955](https://www.jenkins.io/security/advisory/2020-08-12/#SECURITY-1955).</p> <p>This vulnerability is known to be exploitable by attackers with Job/Configure permission.</p> <p>Jenkins 2.356, LTS 2.332.4 and LTS 2.346.1 addresses this vulnerability, the feature name in help icon tooltips is now escaped.</p> https://cve.radiocsirt.org/vuln/ghsa-62wf-24c4-8r76 https://cve.radiocsirt.org/vuln/gsd-2022-34170 gsd-2022-34170 https://cve.radiocsirt.org/vuln/gsd-2022-34170 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445