CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-36905
https://notcve.org/view.php?id=CVE-2022-36905
27 Jul 2022 — Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 y anteriores, no lleva a cabo la comprobación de la URL para la URL de la base del repositorio de los parámetros de la lista de versiones de artefacto... • http://www.openwall.com/lists/oss-security/2022/07/27/1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 2%CPEs: 1EXPL: 0CVE-2022-34190
https://notcve.org/view.php?id=CVE-2022-34190
22 Jun 2022 — Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Jenkins Maven Metadata Plugin for Jenkins CI server Plugin versiones 2.1 y anteriores, no escapa del nombre y la descripción de los parámetros List maven artifact versions en las visualizaciones que mu... • https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •