Lucene search
MitreCVELIST:CVE-2018-1000177HistoryMay 08, 2018 - 3:00 p.m.
CVE-2018-1000177
2018-05-0815:00:00
mitre
www.cve.org
3
jenkins s3 plugin
cross-site scripting
javascript execution
EPSS
0.001
Percentile
22.0%
A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user’s browser when that user performs some UI actions.
References
Related
osv
osv
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
2022-05-14 03:18:39
prion
prion
Cross site scripting
2018-05-08 15:29:00
nvd
nvd
CVE-2018-1000177
2018-05-08 15:29:00
github
github
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
2022-05-14 03:18:39
cve
cve
CVE-2018-1000177
2018-05-08 15:29:00