Beveiligingsadvies

CVE-2022-28145

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-29 12:31:03

Laatst bijgewerkt 2024-08-03 05:48:37

Toegewezen door jenkins

CVSS-score geen score

Status PUBLISHED

Beschrijving

Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.

← Alle CVE's bekijken Bekijk op cve.org ↗