← Database

CVE-2022-34172

MEDIUM CVSS: 5.4 Published: 2022-06-23 Modified: 2026-06-17

Description

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

Affected Platforms

Jenkins Jenkins

Weakness Type

CWE-79

References