-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:repository-connector | maven | <= 2.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper output encoding in parameter display views. Jenkins plugins typically use Jelly templates to render parameter interfaces. The advisory explicitly states the plugin fails to escape name/description attributes, which would be handled in these view templates. While specific file names aren't provided, the pattern matches Jenkins' standard parameter implementation structure where parameter definitions have associated Jelly views in their package directory. The confidence is high because this is a well-established XSS pattern in Jenkins plugins and the advisory directly identifies the vulnerable attributes.
JavaJava