CVE-2017-1000109

2017-10-0501:29:04

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

CPENameOperatorVersion
dependency-check-plugineqdependency-check-jenkins-plugin-1.1.4
dependency-check-plugineqdependency-check-jenkins-plugin-1.3.1.1
dependency-check-plugineqdependency-check-jenkins-plugin-1.4.1
dependency-check-plugineqdependency-check-jenkins-plugin-1.4.0
dependency-check-plugineqdependency-check-jenkins-plugin-1.4.4
dependency-check-plugineqdependency-check-jenkins-plugin-1.4.5
dependency-check-plugineqdependency-check-jenkins-plugin-1.3.4
dependency-check-plugineqdependency-check-jenkins-plugin-1.3.3
dependency-check-plugineqdependency-check-jenkins-plugin-1.0.1
dependency-check-plugineqdependency-check-jenkins-plugin-1.1.0

Name	Operator	Version
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.1.4
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.3.1.1
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.4.1
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.4.0
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.4.4
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.4.5
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.3.4
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.3.3
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.0.1
dependency-check-plugin	eq	dependency-check-jenkins-plugin-1.1.0