Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-41229

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Published

2022-09-21T16:15:10.157

Last Modified

2025-05-28T15:15:20.663

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application jenkins ns-nd_integration_performance_publisher ≤ 4.8.0.134 Yes
References