RHCOS 4 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory. - jetty: double release of resource can lead to information disclosure CVE-2019-17638 - jenkins: Stored XSS vulnerability in job bui...

GHSA-WV63-GWR9-5C55 Stored XSS vulnerability in Jenkins button labels

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI. This results in a cross-site scripting vulnerability exploitable by attackers with the ability to control button labels. An example of buttons with a user-controlled label are the buttons of the...