-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The vulnerability description explicitly mentions improper escaping in repository URL field form validation. In Jenkins plugin development pattern: 1) Form validation methods typically follow 'doCheck<FieldName>' naming convention 2) Error messages from these methods are directly rendered in the web UI 3) The lack of escaping in error message construction would occur in this validation method. While exact code isn't shown, the pattern matches Jenkins plugin architecture and the vulnerability description's focus on form validation errors for the repository URL field.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:svn-partial-release-mgr | maven | <= 1.0.1 |
Ongoing coverage of React2Shell