Vulnerabilities > Jenkins > Nested View

DATE CVE VULNERABILITY TITLE RISK
2022-06-23 CVE-2022-34182 Cross-site Scripting vulnerability in Jenkins Nested View
Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.
network
low complexity
jenkins CWE-79
6.1
6.1
2021-08-31 CVE-2021-21680 XXE vulnerability in Jenkins Nested View
Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.
network
low complexity
jenkins CWE-611
7.1
7.1