14 matches found
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
EUVD-2022-5785
Malicious code in bioql PyPI...
org.jenkins-ci.plugins:cppncss (1.2), org.jenkins-ci.plugins:dependency-check-jenkins-plugin (>=3.1.1, <=4.0.2) +3 more potentially affected by CVE-2019-10358 via org.jenkins-ci.main:maven-plugin (>=3.0, <=3.1)
org.jenkins-ci.main:maven-plugin MAVEN version =3.0, =3.1.1, =2.30, =2.9, =0.11.0, =0.11.2 Source cves: CVE-2019-10358 Source advisory: OSV:GHSA-HR96-QFVM-52R6...
GHSA-XGMH-RVPW-6498 Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
Cross site scripting
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
Jenkins CppNCSS Plugin 1.1 and earlier is affected by a cross-site scripting (XSS) vulnerability in AbstractProjectAction/index.jelly. An attacker can craft links to Jenkins URLs that, when clicked by a user, execute arbitrary JavaScript in the user’s browser. The issue is documented across multi...
CVE-2018-1000108: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
PT-2018-9287
Name of the Vulnerable Software and Affected Versions: Jenkins CppNCSS Plugin version 1.1 and earlier Description: A cross-site scripting issue exists in the AbstractProjectAction/index.jelly file, allowing an attacker to create links to Jenkins URLs that execute arbitrary JavaScript code in the...
Reflected cross-site-scripting vulnerability in report URL of CppNCSS Plugin
CppNCSS Plugin did not properly escape the report name and graph name, resulting in a reflected cross-site scripting vulnerability. Report name and graph name are now properly escaped...