CVE-2016-3101

2017-02-0915:59:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

CPENameOperatorVersion
extra-columns-plugineqextra-columns-1.5
extra-columns-plugineqextra-columns-1.8
extra-columns-plugineqextra-columns-1.6
extra-columns-plugineqextra-columns-1.13
extra-columns-plugineqextra-columns-1.1
extra-columns-plugineqextra-columns-1.0
extra-columns-plugineqextra-columns-1.10
extra-columns-plugineqextra-columns-1.15
extra-columns-plugineqextra-columns-1.9
extra-columns-plugineqextra-columns-1.3

Name	Operator	Version
extra-columns-plugin	eq	extra-columns-1.5
extra-columns-plugin	eq	extra-columns-1.8
extra-columns-plugin	eq	extra-columns-1.6
extra-columns-plugin	eq	extra-columns-1.13
extra-columns-plugin	eq	extra-columns-1.1
extra-columns-plugin	eq	extra-columns-1.0
extra-columns-plugin	eq	extra-columns-1.10
extra-columns-plugin	eq	extra-columns-1.15
extra-columns-plugin	eq	extra-columns-1.9
extra-columns-plugin	eq	extra-columns-1.3