diff --git a/advisories/github-reviewed/2022/02/GHSA-qqwx-hcp6-25vr/GHSA-qqwx-hcp6-25vr.json b/advisories/github-reviewed/2022/02/GHSA-qqwx-hcp6-25vr/GHSA-qqwx-hcp6-25vr.json index 59edc5b91d2..6e6df403215 100644 --- a/advisories/github-reviewed/2022/02/GHSA-qqwx-hcp6-25vr/GHSA-qqwx-hcp6-25vr.json +++ b/advisories/github-reviewed/2022/02/GHSA-qqwx-hcp6-25vr/GHSA-qqwx-hcp6-25vr.json @@ -1,17 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qqwx-hcp6-25vr", - "modified": "2022-12-01T23:38:24Z", + "modified": "2023-10-27T16:36:34Z", "published": "2022-02-16T00:01:29Z", "aliases": [ "CVE-2022-25185" ], "summary": "Stored XSS vulnerability in Jenkins Generic Webhook Trigger Plugin", - "details": "Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds using the webhook.", + "details": "Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "affected": [ @@ -61,7 +61,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-12-01T23:38:24Z", "nvd_published_at": "2022-02-15T17:15:00Z"