12 matches found
EUVD-2012-4374
Malware in sbrugna...
Jenkins < 1.482, < 1.466.2 LTS Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
Cross-site Scripting (XSS)
Overview org.jvnet.hudson.plugins:ci-game is a Jenkins Continuous Integration Game plugin Affected versions of this package are vulnerable to Cross-site Scripting XSS. An attacker can inject arbitrary web script or HTML by sending a crafted request. Details Cross-site scripting or XSS is a code...
GHSA-3QXR-Q72Q-HMWP Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
Cross site scripting
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
PT-2019-6777
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.482 Jenkins LTS versions prior to 1.466.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the CI game plugin, which can lead to Cross-site Scripting XSS attacks...
CVE-2012-4441: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...