Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.6 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS5.7AI score0.00195EPSS
Exploits0References1
OSV
OSV
added 2022/05/24 5:3 p.m.16 views

GHSA-9523-474X-5H36 Cross site scripting in Jenkins Mission Control Plugin

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS5.2AI score0.00195EPSS
Exploits0References3
CNVD
CNVD
added 2019/12/23 12:0 a.m.4 views

CloudBees Jenkins Mission Control Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in CloudBees Jenkins Mission Control Plugin version 0.9.16 and earlier. The vulnerability stems from the failure of a...

5.4CVSS6.4AI score0.00195EPSS
Exploits0References1
NVD
NVD
added 2019/12/17 3:15 p.m.13 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS5.3AI score0.00195EPSS
Exploits0References2
OSV
OSV
added 2019/12/17 3:15 p.m.1 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS6.1AI score0.00195EPSS
Exploits0References2
Prion
Prion
added 2019/12/17 3:15 p.m.15 views

Cross site scripting

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

3.5CVSS5.1AI score0.00195EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/12/17 2:40 p.m.17 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.2AI score0.00195EPSS
Exploits0References2
CVE
CVE
added 2019/12/17 2:40 p.m.56 views

CVE-2019-16563

The CVE-2019-16563 entry concerns Jenkins Mission Control Plugin (versions 0.9.16 and earlier). The vulnerability is a stored XSS caused by the plugin not escaping job display names and build names displayed in its view, enabling an attacker who can modify these properties to inject script. Impac...

5.4CVSS5.2AI score0.00195EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder