EUVD-2022-5484

Malicious code in bioql PyPI...

CVE-2023-41930

CVE-2023-41930 affects Jenkins via the Job Configuration History Plugin (versions up to 1227.v7a_79fc4dc01f and earlier). The vulnerability arises because the plugin does not restrict the name query parameter when rendering a history entry, enabling an attacker to have Jenkins render a manipulate...

Path traversal allows exploiting XSS vulnerability in jobConfigHistory

jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict a name query parameter when rendering a history entry. This allows attackers to have Jenkins render a manipulated configuration history that was not created by the plugin. The history view does not property sanitize or escape the...

CloudBees Jenkins Job Config History Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools , which is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Job Config History Plugin is used in one of the plug-in to save a copy...

CVE-2018-1000416

A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access...

CVE-2018-1000416

The CVE-2018-1000416 entry concerns Jenkins Job Config History Plugin (versions up to 2.18) with a reflected cross-site scripting (XSS) flaw in all Jelly files that allows an attacker to inject arbitrary HTML into Jenkins output shown to users who have Job/Configure access. This is a client-side ...

CVE-2018-1000416: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access...

PT-2019-8727

Name of the Vulnerable Software and Affected Versions Jenkins Job Config History Plugin versions 2.18 and earlier Description A reflected cross-site scripting issue exists, allowing arbitrary attacker-specified HTML to be shown in Jenkins to users with Job/Configure access. This occurs in all Jel...

Reflected XSS vulnerability in Job Config History Plugin

Job Config History Plugin did not escape some query parameters shown on its pages, resulting in a reflected cross-site scripting XSS vulnerability. Job Config History Plugin now globally applies variable escaping to its pages...