CVE-2022-34195: XSS
Published Jun 22, 2022
·Updated
Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected Software
1 affected component
Jenkins Repository Connector Jenkins<=2.2.0
Event History
Jun 22, 2022
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-34195?
CVE-2022-34195 is classified as a medium severity stored cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2022-34195?
To fix CVE-2022-34195, update the Jenkins Repository Connector Plugin to version 2.2.1 or later.
3
Who is affected by CVE-2022-34195?
Users of Jenkins Repository Connector Plugin version 2.2.0 and earlier are affected by CVE-2022-34195.
4
What type of vulnerability is CVE-2022-34195?
CVE-2022-34195 is a stored cross-site scripting (XSS) vulnerability.
5
Can attackers exploit CVE-2022-34195 without permissions?
No, attackers require Item/Configure permissions to exploit CVE-2022-34195.