Jenkins Wall Display Plugin Cross-site Scripting vulnerability

2022-05-2416:52:45

Google

osv.dev

jenkins

wall display plugin

cross-site scripting

EPSS

0.001

Percentile

36.1%

JSON

Wall Display Master Project Plugin does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability.

As of publication of this advisory, there is no fix.

References

www.openwall.com/lists/oss-security/2019/08/07/1

github.com/jenkinsci/walldisplay-plugin

jenkins.io/security/advisory/2019-08-07/#SECURITY-751

nvd.nist.gov/vuln/detail/CVE-2019-10376

EPSS

0.001

Percentile

36.1%

JSON

Related for OSV:GHSA-HC34-F55M-RH3M