Alpine/jenkins: medium 5.4

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

Action: Upgrade jenkins to 2.346.2-r0 or later.

Affected

introduced	fixed	last affected
2.340	2.346.2-r0	-

Fixed versions

2.346.2-r0

Sources

osv: ALPINE-CVE-2022-34172#Alpine:v3.20/jenkins
https://security.alpinelinux.org/vuln/CVE-2022-34172

published 2022-06-23T17:15:15.383Z · modified 2026-11-03T07:30:38.643377425Z · JSON