Lucene search

K
osvGoogleOSV:GHSA-XGMH-RVPW-6498
HistoryMay 14, 2022 - 3:33 a.m.

Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin

2022-05-1403:33:40
Google
osv.dev
2

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user’s browser when accessed.

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

Related for OSV:GHSA-XGMH-RVPW-6498