CVE-2022-46686: 
Java vulnerability analysis and mitigation

CVE-2022-46686 is a stored cross-site scripting (XSS) vulnerability affecting the Jenkins Custom Build Properties Plugin versions 2.79.vc095ccc85094 and earlier. The vulnerability was discovered and reported by Kevin Guerroudj and Valdes Che Zogou from CloudBees, Inc., and was publicly disclosed on December 7, 2022 (Jenkins Advisory).

The vulnerability stems from the plugin's failure to properly escape property values and build display names on the Custom Build Properties and Build Summary pages. This security flaw is classified as High severity according to the CVSS scoring system (Jenkins Advisory).

The vulnerability allows attackers with the ability to set or change property values and build display names to execute stored cross-site scripting (XSS) attacks. This could potentially lead to unauthorized access, data theft, or manipulation of Jenkins interface content (Jenkins Advisory).

The vulnerability has been fixed in Custom Build Properties Plugin version 2.82.v16d5b_d3590c7. Users are strongly advised to upgrade to this version, which properly escapes property values and build display names on the Custom Build Properties and Build Summary pages (Jenkins Advisory).