CVE-2022-38664

Name of the Vulnerable Software and Affected Versions Jenkins Job Configuration History Plugin versions 1165.v8cc9fd1f4597 and earlier

Description The issue results in a stored cross-site scripting (XSS) vulnerability. This occurs because the job name on the System Configuration History page is not properly escaped. Attackers who can configure job names may exploit this vulnerability.

Recommendations For Jenkins Job Configuration History Plugin versions 1165.v8cc9fd1f4597 and earlier, update to a version that properly escapes job names on the System Configuration History page to prevent stored cross-site scripting (XSS) attacks.