Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting Detection

Jenkins Gitlab Hook 1.4.2 and earlier does not escape project names in the buildnow endpoint, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Gitlab Hook 1.""" from kittysploit import from lib.protocols.http.httpclient import...

CVE-2020-2096: Improper Neutralization of Input During Web Page Generation

Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the buildnow endpoint, resulting in a reflected XSS vulnerability...