Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:badge:*:*:*:*:*:jenkins:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Badge (a65d8ca8-bef8-5c02-bc8d-79542dc4e528) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jenkins |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23108 |
vulnerable | 2026-06-08 05:40:56.332535 |
Details available
Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Published: 2022-01-12T19:06:08.000Z
Updated: 2024-08-03T03:36:19.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000604 |
vulnerable | 2026-06-08 05:10:25.800643 |
Details available
A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
Published: 2018-06-26T17:00:00.000Z
Updated: 2024-09-16T20:22:59.913Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.