CVE-2022-43420

Maven/org.jenkins-ci.plugins:contrast-continuous-application-security CVE-2022-43420: high 7.5

Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin

Action: Upgrade org.jenkins-ci.plugins:contrast-continuous-application-security to 3.10 or later.

Affected

Fixed versions

Sources

• osv: GHSA-hvcr-927w-qcvq
• https://nvd.nist.gov/vuln/detail/CVE-2022-43420
• https://github.com/jenkinsci/contrast-continuous-application-security-plugin/commit/1babcd1e972a265527af12a9f85393d08937859c
• https://github.com/jenkinsci/contrast-continuous-application-security-plugin
• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2836
• http://www.openwall.com/lists/oss-security/2022/10/19/3

CVE-2022-43420 · published 2022-10-19T19:00:18Z · modified 2024-02-16T08:17:40.832404Z · JSON