CVE-2022-46686 is a stored cross-site scripting (XSS) vulnerability affecting Jenkins Custom Build Properties Plugin versions 2.79.vc095ccc85094 and earlier. Attackers with the ability to set or change property values or build display names can inject malicious scripts due to improper escaping on the Custom Build Properties and Build Summary pages. This medium-severity vulnerability (CVSS 5.4) requires low privileges and user interaction, potentially leading to limited impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.79.vc095ccc85094CPE matchmatch criteria | cpe:2.3:a:jenkins:custom_build_properties:*:*:*:*:*:jenkins:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.