Cross site scripting

2017-10-0501:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.6%

JSON

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

CPENameOperatorVersion
owasp_dependency-checkeq2.0.1
owasp_dependency-checkeq2.0.1.1
owasp_dependency-checkeq1.0.1
owasp_dependency-checkeq1.0.1.1
owasp_dependency-checkeq1.0.2
owasp_dependency-checkeq1.0.3
owasp_dependency-checkeq1.0.4
owasp_dependency-checkeq1.0.4.1
owasp_dependency-checkeq1.0.5
owasp_dependency-checkeq1.0.7

Name	Operator	Version
owasp_dependency-check	eq	2.0.1
owasp_dependency-check	eq	2.0.1.1
owasp_dependency-check	eq	1.0.1
owasp_dependency-check	eq	1.0.1.1
owasp_dependency-check	eq	1.0.2
owasp_dependency-check	eq	1.0.3
owasp_dependency-check	eq	1.0.4
owasp_dependency-check	eq	1.0.4.1
owasp_dependency-check	eq	1.0.5
owasp_dependency-check	eq	1.0.7