org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) potentially affected by CVE-2021-21641 via org.jenkins-ci.plugins:promoted-builds (2.17)

org.jenkins-ci.plugins:promoted-builds MAVEN version 2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:promoted-builds and may be impacted: - org.jenkins-ci.plugins:buildgraph-view =1.3.1, =1.8 Source cves: CVE-2021-21641 Sour...

CloudBees Jenkins buildgraph-view Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in CloudBees Jenkins buildgraph-view Plugin 1.8 and earlier versions. The vulnerability stems from a WEB application t...

CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

Cross site scripting

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

CVE-2019-16562

CVE-2019-16562 affects Jenkins buildgraph-view Plugin versions 1.8 and earlier. The vulnerability is a stored XSS where descriptions of builds are not escaped in the plugin’s view, exploitable by users who can modify build descriptions. Public references corroborate the issue across Red Hat, GitH...

CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

CVE-2019-16562: Improper Neutralization of Input During Web Page Generation

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

PT-2019-14717 · Jenkins · Jenkins Buildgraph-View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins buildgraph-view Plugin versions 1.8 and earlier Description: The issue results in a stored cross-site scripting vulnerability. It occurs because the plugin does not escape the description of builds shown in its view. This makes it...

Stored XSS vulnerability in buildgraph-view

buildgraph-view 1.8 and earlier does not escape the description of builds shown in its view. This results in a stored cross-site scripting vulnerability that can be exploited by users able to change the build description. As of publication of this advisory, there is no fix...

org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) potentially affected by CVE-2018-1000114 via org.jenkins-ci.plugins:promoted-builds (2.17)

org.jenkins-ci.plugins:promoted-builds MAVEN version 2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:promoted-builds and may be impacted: - org.jenkins-ci.plugins:buildgraph-view =1.3.1, =1.8 Source cves: CVE-2018-1000114...