[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-29046":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":47,"downstream":48,"duplicates":61,"related":62,"reserved_at":9,"published_at":63,"modified_at":64,"state":65,"summary":66,"references_raw":75,"kevs":106,"epss":107,"epss_history":110,"metrics":358,"affected":371},"CVE-2022-29046","Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[46],"GHSA-wpr6-qvcq-8269",[],[49,51,53,55,57,59],{"_key":50},"RHSA-2022:1600",{"_key":52},"RHSA-2022:2205",{"_key":54},"RHSA-2022:4909",{"_key":56},"RHSA-2022:0871",{"_key":58},"RHSA-2022:4947",{"_key":60},"RHSA-2022:2280",[],[],"2022-04-12T19:50:44.000Z","2024-08-03T06:10:58.937Z","Modified",{"cisa_kev":67,"cisa_ransomware":67,"cisa_vendor":9,"epss_severity":68,"epss_score":69,"severity":70,"severity_score":71,"severity_version":72,"severity_source":73,"severity_vector":74,"severity_status":65},false,"low",0.00096,"medium",5.4,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",[76,85,90,96,101],{"url":77,"sources":78,"tags":81},"https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617",[79,73,80],"cve.org","osv_maven",[82,83,84],"X Refsource CONFIRM","Vendor Advisory","WEB",{"url":86,"sources":87,"tags":88},"https://support.apple.com/kb/HT213345",[79,73,80],[82,89,84],"Third Party Advisory",{"url":91,"sources":92,"tags":93},"http://seclists.org/fulldisclosure/2022/Jul/18",[79,73,80],[94,95,89,84],"Mailing List","X Refsource FULLDISC",{"url":97,"sources":98,"tags":99},"https://nvd.nist.gov/vuln/detail/CVE-2022-29046",[80],[100],"Advisory",{"url":102,"sources":103,"tags":104},"https://github.com/jenkinsci/subversion-plugin",[80],[105],"PACKAGE",[],{"date":108,"score":69,"percentile":109},"2026-06-04",0.26572,[111,115,117,120,123,126,129,131,134,137,140,143,145,148,151,155,158,161,164,167,169,172,175,177,180,182,184,187,190,193,196,199,202,204,206,209,212,215,218,221,223,226,229,232,235,238,241,243,245,247,249,252,255,257,260,263,266,268,271,274,277,280,283,285,288,291,293,295,297,300,302,304,307,309,312,315,318,321,323,325,328,331,334,337,340,342,345,348,351,354],{"date":112,"score":113,"percentile":114},"2025-11-04",0.13683,0.93958,{"date":116,"score":113,"percentile":114},"2025-11-05",{"date":118,"score":113,"percentile":119},"2025-11-06",0.9396,{"date":121,"score":113,"percentile":122},"2025-11-07",0.93963,{"date":124,"score":113,"percentile":125},"2025-11-08",0.93965,{"date":127,"score":113,"percentile":128},"2025-11-09",0.93964,{"date":130,"score":113,"percentile":125},"2025-11-10",{"date":132,"score":113,"percentile":133},"2025-11-11",0.93967,{"date":135,"score":113,"percentile":136},"2025-11-12",0.93972,{"date":138,"score":113,"percentile":139},"2025-11-13",0.93973,{"date":141,"score":113,"percentile":142},"2025-11-14",0.93975,{"date":144,"score":113,"percentile":136},"2025-11-15",{"date":146,"score":113,"percentile":147},"2025-11-16",0.93976,{"date":149,"score":113,"percentile":150},"2025-11-17",0.93974,{"date":152,"score":153,"percentile":154},"2025-11-18",0.24981,0.9582,{"date":156,"score":153,"percentile":157},"2025-11-19",0.95821,{"date":159,"score":153,"percentile":160},"2025-11-20",0.95823,{"date":162,"score":113,"percentile":163},"2025-11-21",0.93983,{"date":165,"score":113,"percentile":166},"2025-11-22",0.93981,{"date":168,"score":113,"percentile":163},"2025-11-23",{"date":170,"score":113,"percentile":171},"2025-11-24",0.93984,{"date":173,"score":113,"percentile":174},"2025-11-25",0.93987,{"date":176,"score":113,"percentile":174},"2025-11-26",{"date":178,"score":113,"percentile":179},"2025-11-27",0.93989,{"date":181,"score":113,"percentile":171},"2025-11-28",{"date":183,"score":113,"percentile":174},"2025-11-29",{"date":185,"score":113,"percentile":186},"2025-11-30",0.93985,{"date":188,"score":113,"percentile":189},"2025-12-01",0.94032,{"date":191,"score":113,"percentile":192},"2025-12-02",0.94033,{"date":194,"score":113,"percentile":195},"2025-12-03",0.94034,{"date":197,"score":113,"percentile":198},"2025-12-04",0.93986,{"date":200,"score":113,"percentile":201},"2025-12-05",0.9399,{"date":203,"score":113,"percentile":201},"2025-12-06",{"date":205,"score":113,"percentile":179},"2025-12-07",{"date":207,"score":113,"percentile":208},"2025-12-08",0.93992,{"date":210,"score":113,"percentile":211},"2025-12-09",0.93997,{"date":213,"score":113,"percentile":214},"2025-12-10",0.94005,{"date":216,"score":113,"percentile":217},"2025-12-11",0.94007,{"date":219,"score":113,"percentile":220},"2025-12-12",0.94009,{"date":222,"score":113,"percentile":220},"2025-12-13",{"date":224,"score":113,"percentile":225},"2025-12-14",0.94006,{"date":227,"score":113,"percentile":228},"2025-12-15",0.94008,{"date":230,"score":153,"percentile":231},"2025-12-16",0.95965,{"date":233,"score":153,"percentile":234},"2025-12-17",0.95968,{"date":236,"score":153,"percentile":237},"2025-12-18",0.9597,{"date":239,"score":153,"percentile":240},"2025-12-19",0.95969,{"date":242,"score":153,"percentile":240},"2025-12-20",{"date":244,"score":153,"percentile":240},"2025-12-21",{"date":246,"score":153,"percentile":240},"2025-12-22",{"date":248,"score":153,"percentile":240},"2025-12-23",{"date":250,"score":153,"percentile":251},"2025-12-24",0.95974,{"date":253,"score":153,"percentile":254},"2025-12-25",0.95978,{"date":256,"score":153,"percentile":254},"2025-12-26",{"date":258,"score":153,"percentile":259},"2025-12-27",0.95998,{"date":261,"score":153,"percentile":262},"2025-12-28",0.95975,{"date":264,"score":153,"percentile":265},"2025-12-29",0.95977,{"date":267,"score":153,"percentile":265},"2025-12-30",{"date":269,"score":153,"percentile":270},"2025-12-31",0.95982,{"date":272,"score":153,"percentile":273},"2026-01-01",0.96018,{"date":275,"score":153,"percentile":276},"2026-01-02",0.96013,{"date":278,"score":153,"percentile":279},"2026-01-03",0.9601,{"date":281,"score":153,"percentile":282},"2026-01-04",0.95973,{"date":284,"score":153,"percentile":237},"2026-01-05",{"date":286,"score":153,"percentile":287},"2026-01-06",0.95971,{"date":289,"score":153,"percentile":290},"2026-01-07",0.95972,{"date":292,"score":153,"percentile":251},"2026-01-08",{"date":294,"score":153,"percentile":265},"2026-01-09",{"date":296,"score":153,"percentile":270},"2026-01-10",{"date":298,"score":153,"percentile":299},"2026-01-11",0.95979,{"date":301,"score":153,"percentile":299},"2026-01-12",{"date":303,"score":153,"percentile":254},"2026-01-13",{"date":305,"score":153,"percentile":306},"2026-01-14",0.95985,{"date":308,"score":153,"percentile":306},"2026-01-15",{"date":310,"score":153,"percentile":311},"2026-01-16",0.95987,{"date":313,"score":153,"percentile":314},"2026-01-17",0.9599,{"date":316,"score":153,"percentile":317},"2026-01-18",0.95993,{"date":319,"score":153,"percentile":320},"2026-01-19",0.95992,{"date":322,"score":153,"percentile":320},"2026-01-20",{"date":324,"score":153,"percentile":317},"2026-01-21",{"date":326,"score":153,"percentile":327},"2026-01-22",0.95996,{"date":329,"score":153,"percentile":330},"2026-01-23",0.96,{"date":332,"score":153,"percentile":333},"2026-01-24",0.96002,{"date":335,"score":153,"percentile":336},"2026-01-25",0.96005,{"date":338,"score":153,"percentile":339},"2026-01-26",0.96007,{"date":341,"score":153,"percentile":336},"2026-01-27",{"date":343,"score":153,"percentile":344},"2026-01-28",0.96006,{"date":346,"score":153,"percentile":347},"2026-01-29",0.96008,{"date":349,"score":153,"percentile":350},"2026-01-30",0.96009,{"date":352,"score":153,"percentile":353},"2026-01-31",0.96011,{"date":355,"score":356,"percentile":357},"2026-02-01",0.2,0.95344,[359,369],{"source":73,"cvss_v2_0":360,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":361,"baseSeverity":9,"vectorString":362,"impactScore":363,"exploitabilityScore":364},3.5,"AV:N/AC:M/Au:S/C:N/I:P/A:N",2.9,6.8,{"baseScore":71,"baseSeverity":366,"vectorString":74,"impactScore":367,"exploitabilityScore":368},"MEDIUM",4.5,5.9,{"source":80,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":370,"cvss_v4_0":9},{"baseScore":71,"baseSeverity":9,"vectorString":74,"impactScore":367,"exploitabilityScore":368},[372,383,393,399],{"ecosystem":9,"name":373,"vendor":9,"product":373,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":374},"macOS",[375],{"version":376,"is_range":377,"range_type":378,"version_start":379,"version_start_type":380,"version_end":381,"version_end_type":382,"fixed_in":9},"gte12.0_lt12.5",true,"cpe","12.0","including","12.5","excluding",{"ecosystem":9,"name":384,"vendor":385,"product":386,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":388},"Jenkins Subversion Plugin","jenkins project","jenkins subversion plugin","a",[389],{"version":390,"is_range":377,"range_type":79,"version_start":391,"version_start_type":380,"version_end":392,"version_end_type":380,"fixed_in":9},">= unspecified, \u003C= 2.15.3","unspecified","2.15.3",{"ecosystem":9,"name":394,"vendor":395,"product":394,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":396},"subversion","jenkins",[397],{"version":398,"is_range":377,"range_type":378,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":380,"fixed_in":9},"lte2.15.3",{"ecosystem":400,"name":401,"vendor":402,"product":394,"cpe_part":9,"purl_type":403,"purl_namespace":402,"purl_name":394,"source":9,"versions":404},"Maven","org.jenkins-ci.plugins:subversion","org.jenkins-ci.plugins","maven",[405],{"version":406,"is_range":377,"range_type":407,"version_start":9,"version_start_type":9,"version_end":408,"version_end_type":382,"fixed_in":9},"lt2_15_4","ecosystem","2.15.4"]