Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/09/06 12:00 a.m.•17 views

Path traversal allows exploiting XSS vulnerability in jobConfigHistory

jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict a name query parameter when rendering a history entry. This allows attackers to have Jenkins render a manipulated configuration history that was not created by the plugin. The history view does not property sanitize or escape the...

8CVSS5AI score0.00917EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder