Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/08/23 12:00 a.m.•20 views

Stored XSS vulnerability in jobConfigHistory

jobConfigHistory 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure job names. jobConfigHistory 1166.vc9f255f45b8a escapes the job name on...

8CVSS5.4AI score0.00709EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder