Stored Cross-Site Scripting Vulnerability in Jenkins Agent Server Parameter Plugin

CVE-2022-25191

What is CVE-2022-25191?

The Jenkins Agent Server Parameter Plugin, up to version 1.0, is susceptible to a stored cross-site scripting (XSS) vulnerability. This flaw arises from the failure to properly escape parameter names in agent server parameters. Consequently, an attacker with Item/Configure permission may exploit this vulnerability to inject malicious scripts, potentially compromising user data and applications. It underscores the importance of securing plugins and validating inputs to prevent such security breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References