Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

GHSA-WRWQ-4F2H-QXJ8 Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2020-52608)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . Jenkins Custom Job Icon plugi...

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

Cross site scripting

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2264

Summary: CVE-2020-2264 affects Jenkins Custom Job Icon Plugin (versions 0.2 and earlier). The vulnerability is a stored XSS caused by failing to escape job descriptions in tooltips. Exploitation requires attacker to have Job/Configure permission. Impact: stored XSS that can execute client-side co...

PT-2020-15489 · Jenkins · Jenkins Custom Job Icon Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Custom Job Icon Plugin versions 0.2 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the job descriptions in tooltips are not properly escaped. Attackers with...