1 matches found
Path traversal allows exploiting XSS vulnerability in jobConfigHistory
jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict a name query parameter when rendering a history entry. This allows attackers to have Jenkins render a manipulated configuration history that was not created by the plugin. The history view does not property sanitize or escape the...
8CVSS5AI score0.00917EPSS
SaveExploits0Affected Software1
20