CVE-2019-10335

2019-06-1114:29:00

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

JSON

A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.

CPENameOperatorVersion
electricflow-plugineqelectricflow-1.0
electricflow-plugineqelectricflow-1.1.3
electricflow-plugineqelectricflow-1.1.5
electricflow-plugineqelectricflow-1.1.2
electricflow-plugineqelectricflow-1.1.6
electricflow-plugineqelectricflow-1.1.1
electricflow-plugineqelectricflow-1.1.4

Name	Operator	Version
electricflow-plugin	eq	electricflow-1.0
electricflow-plugin	eq	electricflow-1.1.3
electricflow-plugin	eq	electricflow-1.1.5
electricflow-plugin	eq	electricflow-1.1.2
electricflow-plugin	eq	electricflow-1.1.6
electricflow-plugin	eq	electricflow-1.1.1
electricflow-plugin	eq	electricflow-1.1.4