Lucene search
GoogleOSV:GHSA-3892-QQV6-H2QMHistoryMay 14, 2022 - 3:18 a.m.
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
2022-05-1403:18:39
Google
osv.dev
4
jenkins
s3 plugin
cross-site scripting
A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user’s browser when that user performs some UI actions.
Related
nvd
nvd
CVE-2018-1000177
2018-05-08 15:29:00
github
github
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
2022-05-14 03:18:39
cvelist
cvelist
CVE-2018-1000177
2018-05-08 15:00:00
cve
cve
CVE-2018-1000177
2018-05-08 15:29:00
prion
prion
Cross site scripting
2018-05-08 15:29:00