Lucene search
GoogleOSV:GHSA-9M48-54PJ-H248HistoryMay 24, 2022 - 4:55 p.m.
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-2416:55:01
Google
osv.dev
11
jenkins
cross-site scripting
vulnerability
attackers
html
javascript
update center web pages
EPSS
0.001
Percentile
31.7%
A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.
References
www.openwall.com/lists/oss-security/2019/08/28/4
access.redhat.com/errata/RHSA-2019:2789
access.redhat.com/errata/RHSA-2019:3144
github.com/jenkinsci/jenkins/commit/fb88530f77d38660ab2aae8c2e842944f0fb1507
jenkins.io/security/advisory/2019-08-28/#SECURITY-1453
nvd.nist.gov/vuln/detail/CVE-2019-10383
www.oracle.com/security-alerts/cpuapr2022.html
Related
osv
osv
CVE-2019-10383
2019-08-28 16:15:10
cve
cve
CVE-2019-10383
2019-08-28 16:15:10
cvelist
cvelist
CVE-2019-10383
2019-08-28 15:30:16
nvd
nvd
CVE-2019-10383
2019-08-28 16:15:10
github
github
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-24 16:55:01
redhatcve
redhatcve
CVE-2019-10383
2019-08-30 04:58:22
veracode
veracode
Cross-site Scripting (XSS)
2019-09-21 00:17:23
prion
prion
Cross site scripting
2019-08-28 16:15:00
nessus
nessus
Jenkins < 2.176.3 LTS / 2.192 Multiple Vulnerabilities
2019-10-10 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:3144)
2019-10-18 00:00:00
RHEL 7 : OpenShift Container Platform 4.1.16 jenkins (RHSA-2019:2789)
2019-09-23 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2019-08-28 00:00:00
archlinux
archlinux
[ASA-201908-22] jenkins: multiple issues
2019-08-30 00:00:00
redhat
redhat
openvas
openvas
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Linux
2019-08-30 00:00:00
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Windows
2019-08-30 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00