Security Bulletin: Cross-site scripting vulnerability on the Projects page in IBM UrbanCode Build (CVE-2015-1983)

Summary IBM UrbanCode Build is vulnerable to cross-site scripting on the Projects page. Vulnerability Details CVE-ID: CVE-2015-1983 Description: IBM UrbanCode Build is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this...

CVE-2015-1983

IBM UrbanCode Build is vulnerable to cross-site scripting on the Projects page (CVE-2015-1983). The issue is caused by improper validation of user-supplied input, allowing remote authenticated users to execute script via a crafted URL. Affected versions: 6.1.0, 6.1.0.1, and 6.1.0.2 on all support...