PT-2019-8726

Name of the Vulnerable Software and Affected Versions Jenkins Rebuilder Plugin versions 1.28 and earlier Description A cross-site scripting issue exists in the Jenkins Rebuilder Plugin that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms. This issue is...

CVE-2018-1000415: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly,...