{"id":"CVE-2022-34182","details":"Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.","aliases":["GHSA-h642-5h74-3x9c"],"modified":"2026-07-09T03:25:59.668080Z","published":"2022-06-23T17:15:15.990Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2768"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/nested-view-plugin","events":[{"introduced":"eab7368a0ea55894a07000462b0c16f4f17012a8"},{"last_affected":"7e41e3f015517aa0ce5cd10e39a7e66f820653b7"}],"database_specific":{"extracted_events":[{"introduced":"1.20"},{"last_affected":"1.25"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:jenkins:nested_view:*:*:*:*:*:jenkins:*:*"}}],"versions":["nested-view-1.25","nested-view-1.24","nested-view-1.23","nested-view-1.22","nested-view-1.21","nested-view-1.20"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34182.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}