Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-36922

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scr

Description

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jenkins project Jenkins Lucene-Search Plugin

  • unspecified to ≤ 370.v62a5f618cd3aaffected
  • next of 370.v62a5f618cd3a to < unspecifiedunknown

References