CVE-2017-1000102: Improper Neutralization of Input During Web Page Generation

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...

CVE-2017-1000109

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view...

CVE-2017-1000102

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...

CVE-2017-1000103

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view...

CVE-2017-1000103

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view...

CVE-2017-1000102

The CVE-2017-1000102 issue concerns the CloudBees Static Analysis Utilities plugin for Jenkins. The Details view in these plugins (notably the Warnings Plugin input parsed from console output) is vulnerable to a persisted cross-site scripting (XSS) attack. Malicious input can cause arbitrary HTML...

PT-2017-10807

Name of the Vulnerable Software and Affected Versions Static Analysis Utilities based plugins affected versions not specified Description The Details view of some Static Analysis Utilities based plugins was vulnerable to a persisted cross-site scripting issue. Malicious users who could influence...

PT-2017-10808

Name of the Vulnerable Software and Affected Versions Static Analysis Utilities based DRY Plugin affected versions not specified Description The custom Details view of the Static Analysis Utilities based DRY Plugin was vulnerable to a persisted cross-site scripting issue. Malicious users who coul...

PT-2017-10814

Name of the Vulnerable Software and Affected Versions OWASP Dependency-Check Plugin affected versions not specified Description The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin was vulnerable to a persisted cross-site scripting issue. Malicious users wh...