CVE-2022-43420

Name of the Vulnerable Software and Affected Versions Jenkins Contrast Continuous Application Security Plugin versions 3.9 and earlier

Description The issue is related to a stored cross-site scripting (XSS) vulnerability. It occurs because the plugin does not escape data returned from the Contrast service when generating a report. This allows attackers who can control or modify Contrast service API responses to exploit the vulnerability.

Recommendations For versions 3.9 and earlier, update to version 3.10 or later, which escapes the affected data and resolves the issue.