CVE-2019-10396

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

CVE-2019-10396

CVE-2019-10396 affects Jenkins Dashboard View Plugin versions 2.11 and earlier. The root cause is failure to escape build descriptions in the Latest Builds View, enabling cross-site scripting by users who can modify build descriptions. Public sources (Red Hat, GitHub advisories, and CVE records) ...

CVE-2019-10396: Improper Neutralization of Input During Web Page Generation

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

PT-2019-11790 · Jenkins · Jenkins Dashboard View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dashboard View Plugin versions 2.11 and earlier Description: The issue is related to a cross-site scripting vulnerability. It occurs because build descriptions are not properly escaped, allowing attackers who can change build...

TweetDeck Taken Down in Wake of XSS Attacks

TweetDeck services have been disabled for the time being as Twitter tries to get a handle on a cross-site scripting vulnerability that caused mountains of consternation on the social networking platform this morning. We've temporarily taken TweetDeck services down to assess today's earlier securi...