CVE-2022-36922

Publication date

2022-07-27 14:29:29

Family

jenkins

State

PUBLISHED

Description

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the search result page, resulting in a reflected cross-site scripting (XSS) vulnerability.