Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Lucene-Search Plugin unspecified Clear all filters
TI-2022-17137 CVE-2022-36922 · GHSA-6954-h5c8-m29f

Cross-site scripting in Jenkins Lucene-Search Plugin

Priority LOW 29

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00734 Published 2022-07-27 Fixed in 387.v938a CWE-79
TI-2022-17125 CVE-2022-36910 · GHSA-m8w5-vwq3-gp8f

Missing authorization in Jenkins Lucene-Search Plugin

Priority LOW 25

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00519 Published 2022-07-27 Fixed in 387.v938a CWE-862