Jenkins Job and Node ownership Plugin 跨站脚本漏洞

Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Job and Node ownership Plugin 0.13.0 and earlier versions have a cross-site scripting vulnerability that stems from unescaped secondar...

Stored XSS vulnerability in ownership

ownership 0.13.0 and earlier does not escape the names of secondary owners. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix. Learn why we announce this...