Red Hat Security Advisory

RHSA-2022:6531

OpenShift Container Platform 4.10.33 packages and security update

Released 2022-09-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.10 jenkins-2-plugins-4.10.1663147786-1.el8

Fixes 2 records

TI-2022-15091 CVE-2022-34176 · GHSA-64mj-3p92-589v

Cross-site scripting in Jenkins JUnit Plugin

MEDIUM 64

Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.77515 Published 2022-06-22 Partial fix · 1.53.0.1, 1119.1121.vc43d0fc45561 CWE-79

TI-2022-15092 CVE-2022-34177 · GHSA-29q6-p2cg-4v23

Path traversal in Jenkins Pipeline: Input Step Plugin

LOW 36

Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01696 Published 2022-06-22 Partial fix · 447.449.v193fd29f6021, 2.12.2 +1 CWE-22