Stored XSS Vulnerability in Jenkins CRX Content Package Deployer Plugin

CVE-2022-34184

What is CVE-2022-34184?

The Jenkins CRX Content Package Deployer Plugin versions 1.9 and earlier contain a stored cross-site scripting vulnerability. The vulnerability arises from the lack of proper escaping of the name and description fields of CRX Content Package Choice parameters on user-facing views. This flaw can be exploited by attackers who have Item/Configure permissions, allowing them to inject malicious scripts, which could be executed in the context of other users' sessions, compromising sensitive information and potentially leading to further exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References