Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:29 p.m.25 views

Stored XSS vulnerability in Jenkins Liquibase Runner Plugin

Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents when showing them on the build page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide Liquibase changesets evaluated by the plugin. Liquibase Runner Plugin 1.4.7 no...

5.4CVSS4.9AI score0.00735EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder