CVE-2016-4988

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2016-4988

CVE-2016-4988 describes a Cross-site scripting (XSS) vulnerability in the Jenkins Build Failure Analyzer plugin prior to version 1.16.0. The issue arises in the plugin’s handling of an unspecified parameter, allowing remote attackers to inject arbitrary web script or HTML. The impact is limited t...

CVE-2016-4988

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...