CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

Cross site scripting

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

CVE-2019-16562

CVE-2019-16562 affects Jenkins buildgraph-view Plugin versions 1.8 and earlier. The vulnerability is a stored XSS where descriptions of builds are not escaped in the plugin’s view, exploitable by users who can modify build descriptions. Public references corroborate the issue across Red Hat, GitH...

CVE-2019-16562

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...

Stored XSS vulnerability in buildgraph-view

buildgraph-view 1.8 and earlier does not escape the description of builds shown in its view. This results in a stored cross-site scripting vulnerability that can be exploited by users able to change the build description. As of publication of this advisory, there is no fix...

PT-2019-14717 · Jenkins · Jenkins Buildgraph-View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins buildgraph-view Plugin versions 1.8 and earlier Description: The issue results in a stored cross-site scripting vulnerability. It occurs because the plugin does not escape the description of builds shown in its view. This makes it...

CVE-2019-16562: Improper Neutralization of Input During Web Page Generation

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...