Lucene search
GoogleOSV:GHSA-3MWJ-7VMQ-W43PHistoryMay 24, 2022 - 5:25 p.m.
Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin
2022-05-2417:25:24
Google
osv.dev
11
jenkins
build visualizer
xss
vulnerability
stored
tooltip
exploitable
permission
EPSS
0.001
Percentile
22.0%
Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.
Yet Another Build Visualizer Plugin 1.12 escapes tooltip content.
References
www.openwall.com/lists/oss-security/2020/08/12/4
github.com/jenkinsci/yet-another-build-visualizer-plugin
github.com/jenkinsci/yet-another-build-visualizer-plugin/commit/0e6db61ef66f4ed4f2e580240e364f195b00ee6e
jenkins.io/security/advisory/2020-08-12/#SECURITY-1940
nvd.nist.gov/vuln/detail/CVE-2020-2236
Related
cve
cve
CVE-2020-2236
2020-08-12 14:15:13
prion
prion
Cross site scripting
2020-08-12 14:15:00
nvd
nvd
CVE-2020-2236
2020-08-12 14:15:13
osv
osv
CVE-2020-2236
2020-08-12 14:15:13
cvelist
cvelist
CVE-2020-2236
2020-08-12 13:25:24
github
github
Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin
2022-05-24 17:25:24