Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/08/25 6:10 a.m.5 views

jenkins: Stored XSS vulnerability in console links

A flaw was found in Jenkins versions 2.244 and prior and in LTS 2.235.1 and prior. HREF attribute of links to downstream jobs are not escaped on build console pages which could lead to a stored cross-site scripting XSS vulnerability. The user must have the Agent/Configure permission for this...

5.4CVSS5.9AI score0.01032EPSS
SaveExploits0References4
Rows per page
Query Builder