CVE-2022-0538
HIGHJenkins <2.333 - XSS
Title source: llmDescription
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
Scores
CVSS v3
7.5
EPSS
0.0057
EPSS Percentile
68.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (3)
jenkins/jenkins
< 2.319.3
jenkins/jenkins
< 2.334
org.jenkins-ci.main/jenkins-core
< 2.334Maven
Timeline
Published
Feb 09, 2022
Tracked Since
Feb 18, 2026