Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/02/15 12:00 a.m.•19 views

Stored XSS vulnerability in generic-webhook-trigger

generic-webhook-trigger 1.81 and earlier does not escape the build cause for the webhook. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds using the webhook. generic-webhook-trigger 1.82 escapes the build cause when displayed on the U...

8CVSS5.4AI score0.00658EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder