CVE-2018-1000113

The CVE-2018-1000113 entry describes a cross-site scripting vulnerability in Jenkins TestLink Plugin (versions up to 2.12) affecting TestLinkBuildAction/summary.jelly and related components. The root cause is improper handling of user-controlled report names, enabling an attacker to cause Jenkins...

CVE-2018-1000113

A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript...

CVE-2018-1000113: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript...

Stored cross-site scripting vulnerability in TestLink Plugin

Users with Job/Configure permission were able to configure TestLink reports to display arbitrary unescaped HTML e.g. in test case names. The plugin now properly escapes its HTML output...