Cross site scripting

2020-07-0215:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.3%

JSON

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
vncviewerle1.7

CPE	Name	Operator	Version
	vncviewer	le	1.7

References

www.openwall.com/lists/oss-security/2020/07/02/7

jenkins.io/security/advisory/2020-07-02/

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for PRION:CVE-2020-2207