Jenkins Project Jenkins Promoted Builds (Simple) Plugin vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Promoted Builds (Simple) Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2022-25202jenkins projectjenkins promoted builds (simple) plugin+2
EPSS score
0.57%
Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.5.4CVE-2022-30965jenkins projectjenkins promoted builds (simple) plugin+2
EPSS score
0.78%
Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.