Cross-site Scripting in Jenkins Sauce OnDemand Plugin

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Jenkins Sauce OnDemand Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

CVE-2022-34197

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34197

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34197

The CVE-2022-34197 entry concerns Jenkins Sauce OnDemand Plugin (versions 1.204 and earlier). The vulnerability is a stored cross-site scripting (XSS) flaw arising from lack of escaping for the names and descriptions of Sauce Labs Browsers parameters on parameter-view pages, enabling exploitation...

PT-2022-22066 · Jenkins · Jenkins Sauce Ondemand Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Sauce OnDemand Plugin versions 1.204 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which can be exploited by attackers with Item/Configure permission. This occurs because the plugin doe...

Open OnDemand has an unspecified vulnerability

Osc Open OnDemand is an application of the Osc open source organization in the United States. Open OnDemand has a security vulnerability that could be exploited by an attacker to provide crafted input in job templates...

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

Design/Logic Flaw

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

CVE-2020-27958

The CVE affects the Open OnDemand Open OnDemand Job Composer app used by Ohio Supercomputer Center, specifically versions before 1.7.19 (and 1.8.x before 1.8.18). The reported issue is that remote authenticated users can supply crafted input through a job template, potentially impacting how jobs ...

Open OnDemand 安全漏洞

Osc Open OnDemand is an application of the Osc open source organization in the United States. Open OnDemand has a security vulnerability that could be exploited by an attacker to provide crafted input in job templates...

CVE-2020-36247

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF...

CVE-2020-36247

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF...

Cross site request forgery (csrf)

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF...

CVE-2020-36247

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF...

CVE-2020-36247

Open OnDemand is affected by a CSRF vulnerability affecting versions prior to 1.5.7 and 1.6.x prior to 1.6.22. The issue is described as a CSRF exposure, with CVSS metrics indicating a network attack vector and potential high impact on confidentiality, integrity, and availability (per the 3.1 met...

Osc Open OnDemand Cross-Site Request Forgery Vulnerability

Osc Open OnDemand is an application from the US-based Osc Open Source organization. It provides a service for accessing HPC services. A cross-site request forgery vulnerability exists in Open OnDemand. The vulnerability arises from a WEB application that does not adequately validate that a reques...

Fedora 31 : webkit2gtk3 (2020-f25793aac4)

Update to WebKitGTK 2.28.0. - Add API to enable Process Swap on Cross-site Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox...