Lucene search
+L

41 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/09/16 12:00 a.m.•29 views

Stored XSS vulnerability in computer-queue-plugin

computer-queue-plugin 1.5 and earlier does not escape the agent name in tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Agent/Configure permission. computer-queue-plugin 1.6 escapes the agent name in tooltips...

8CVSS5.4AI score0.00735EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder