VULNERABILITY INTELLIGENCE

CVE-2022-34173

CVSS score5.4 MEDIUM

EPSS probability1.47%

CISA KEVNot currently listed

Published2022-06-23

Last modified2026-06-17

Description

In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.