Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_promoted_builds_(simple)_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Promoted Builds (Simple) Plugin (3e7f80c0-b595-5389-88ed-a72172849613)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30965 vulnerable 2026-06-08 05:43:39.893624 Details available
Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Published: 2022-05-17T14:06:45.000Z
Updated: 2024-08-03T07:03:39.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25202 vulnerable 2026-06-08 05:41:45.529939 Details available
Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.
Published: 2022-02-15T16:11:36.000Z
Updated: 2024-08-03T04:36:06.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.