CVE-2022-27202: XSS
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27202?
CVE-2022-27202 is classified as a medium severity vulnerability due to its potential for stored cross-site scripting (XSS).
How do I fix CVE-2022-27202?
To remediate CVE-2022-27202, update the Jenkins Extended Choice Parameter Plugin to version 347 or later, which addresses the XSS vulnerability.
Who is affected by CVE-2022-27202?
CVE-2022-27202 affects Jenkins users who have the Extended Choice Parameter Plugin version 346.vd87693c5a_86c or earlier installed.
What types of parameters are vulnerable in CVE-2022-27202?
CVE-2022-27202 affects the value and description of extended choice parameters specifically for radio buttons and check boxes.
Can CVE-2022-27202 be exploited remotely?
Yes, CVE-2022-27202 can be exploited by attackers with Item/Configure permission, allowing them to execute XSS attacks.