CVE-2022-28145
CVE-2022-28145
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
29 mar 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.
Productos afectados
Jenkins project · Jenkins Continuous Integration with Toad Edge Plugin¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →