CVE-2022-41240: Jenkins Walti

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.

Affected products

• Jenkins Walti: up to and including 1.0.1

Published 2022-09-21. Last modified 2026-06-17.