Maven/org.jenkins-ci.plugins:naginator CVE-2022-45382: medium 5.4, EPSS 0.65%

Cross-site Scripting in Jenkins Naginator Plugin

Action: Upgrade org.jenkins-ci.plugins:naginator to 1.18.2 or later.

Affected

Fixed versions

Sources

• osv: GHSA-h8hf-hxx6-5g6v
• https://nvd.nist.gov/vuln/detail/CVE-2022-45382
• https://github.com/jenkinsci/naginator-plugin/commit/c335cdd1562333898216bbe137bbe2991c6a225f
• https://github.com/jenkinsci/naginator-plugin
• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2946
• http://www.openwall.com/lists/oss-security/2022/11/15/4

CVE-2022-45382 · published 2022-11-16T12:00:22Z · modified 2024-02-16T08:22:21.950784Z · JSON