high8.0
CVE-2022-34787
Jenkins Project Inheritance Plugin vulnerable to cross site scripting
Impact
Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control the reason a queue item is blocked.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | hudson.plugins:project-inheritance | <= 21.04.03 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Project Inheritance | through 21.04.03 |