https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:03:06 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2022-34173 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2022-34173 https://cve.radiocsirt.org/vuln/euvd-2026-17754 EUVD-2026-17754 https://cve.radiocsirt.org/vuln/euvd-2026-17754 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34173 <p>In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> <p>In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34173 https://cve.radiocsirt.org/vuln/ghsa-6g4r-q7qg-6qx6 <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Since Jenkins 2.340, the tooltip of the build button in list views supports HTML without escaping the job display name.</p> <p>This vulnerability is known to be exploitable by attackers with Job/Configure permission.</p> <p>Jenkins 2.356 addresses this vulnerability. The tooltip of the build button in list views is now escaped.</p> <p>No Jenkins LTS release is affected by SECURITY-2776 or SECURITY-2780, as these were not present in Jenkins 2.332.x and fixed in the 2.346.x line before 2.346.1.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Since Jenkins 2.340, the tooltip of the build button in list views supports HTML without escaping the job display name.</p> <p>This vulnerability is known to be exploitable by attackers with Job/Configure permission.</p> <p>Jenkins 2.356 addresses this vulnerability. The tooltip of the build button in list views is now escaped.</p> <p>No Jenkins LTS release is affected by SECURITY-2776 or SECURITY-2780, as these were not present in Jenkins 2.332.x and fixed in the 2.346.x line before 2.346.1.</p> https://cve.radiocsirt.org/vuln/ghsa-6g4r-q7qg-6qx6 https://cve.radiocsirt.org/vuln/gsd-2022-34173 gsd-2022-34173 https://cve.radiocsirt.org/vuln/gsd-2022-34173 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445