CVE-2019-10325

2019-05-3115:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

JSON

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages.

CPENameOperatorVersion
warnings-ng-plugineqwarnings-ng-1.0.0-beta1
warnings-ng-plugineqwarnings-ng-2.2.1
warnings-ng-plugineqwarnings-ng-1.0.1
warnings-ng-plugineqwarnings-ng-5.0.0
warnings-ng-plugineqwarnings-ng-2.1.2
warnings-ng-plugineqwarnings-ng-1.0.0-beta9
warnings-ng-plugineqwarnings-ng-1.0.0
warnings-ng-plugineqwarnings-ng-2.2.0
warnings-ng-plugineqwarnings-ng-3.0.3
warnings-ng-plugineqwarnings-ng-3.0.2

Name	Operator	Version
warnings-ng-plugin	eq	warnings-ng-1.0.0-beta1
warnings-ng-plugin	eq	warnings-ng-2.2.1
warnings-ng-plugin	eq	warnings-ng-1.0.1
warnings-ng-plugin	eq	warnings-ng-5.0.0
warnings-ng-plugin	eq	warnings-ng-2.1.2
warnings-ng-plugin	eq	warnings-ng-1.0.0-beta9
warnings-ng-plugin	eq	warnings-ng-1.0.0
warnings-ng-plugin	eq	warnings-ng-2.2.0
warnings-ng-plugin	eq	warnings-ng-3.0.3
warnings-ng-plugin	eq	warnings-ng-3.0.2