aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2065 Source advisory: OSV:GHSA-FXJ8-CQCP-3VGQ...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2065 Source advisory: GHSA-FXJ8-CQCP-3VGQ...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2) +39 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.533, <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2014-2065 Source advisory: OSV:GHSA-FXJ8-CQCP-3VGQ...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2) +39 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.533, <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2014-2065 Source advisory: GHSA-FXJ8-CQCP-3VGQ...

CVE-2014-2065

Cross-site scripting XSS vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie...

CVE-2014-2065

Cross-site scripting XSS vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2) +39 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.533, <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2014-2065 Source advisory: MEND:CVE-2014-2065...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2065 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2065 Source advisory: MEND:CVE-2014-2065...

CVE-2014-2065

CVE-2014-2065 is a cross-site scripting (XSS) vulnerability in Jenkins where an attacker could inject arbitrary script via the iconSize cookie. Affected: Jenkins before 1.551 and LTS before 1.532.2. Root cause: improper handling of the iconSize cookie. Impact details are provided, but exploitatio...