23 matches found
CVE-2026-84665
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
CVE-2026-84665
The Jenkins SonarQube Scanner Plugin version 2.18.3 and earlier is vulnerable to a stored cross-site scripting (XSS) issue. The root cause is a failure to limit URL schemes for dashboard links created from SonarQube scanner results, which allows the use of the javascript: scheme. Attackers with I...
EUVD-2026-70131
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
CVE-2026-84665
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
CVE-2026-84665
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
PT-2026-84788
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
CVE-2026-84665: Improper Neutralization of Input During Web Page Generation
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...
Stored XSS vulnerability in sonar
sonar 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.53...
EUVD-2024-0432
Malicious code in bioql PyPI...
GHSA-V5GQ-QVJQ-8P53 Grafana Cross-site Scripting (XSS)
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
SUSE CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
Security update for grafana, grafana-piechart-panel, grafana-status-panel (moderate)
openSUSE Security Update: Security update for grafana, grafana-piechart-panel, grafana-status-panel Announcement ID: openSUSE-SU-2020:0892-1 Rating: moderate References: 1170557 Cross-References: CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 Affected Products: openSUSE Leap 15.2 An update that fix...
grafana: Cross-site Scripting (XSS) in dashboard links
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
Grafana Cross-Site Scripting Vulnerability
Grafana is a set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus and so on. A cross-site scripting vulnerability exists in the dashboard links in versions prior to Grafana 5.2.0-beta1. A...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
UBUNTU-CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
Cross site scripting
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
