CVE-2019-10395

Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties...

CVE-2019-10395

CVE-2019-10395 affects the Jenkins Build Environment Plugin (versions ≤ 1.6) and relates to a cross-site scripting (XSS) vulnerability caused by not escaping values of environment variables shown in plugin views. The issue could be exploited by users who can modify various job/build properties. P...