CVE-2022-34172: Jenkins

Medium severity, CVSS 5.4. EPSS: 1.4% chance of exploitation in the next 30 days.

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

Affected products

• Jenkins Jenkins: from 2.340, up to and including 2.355

Published 2022-06-23. Last modified 2026-06-17.