Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2023/05/16 6:30 p.m.26 views

Jenkins LoadComplete support Plugin Cross-site Scripting vulnerability

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name in its test result page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix...

5.4CVSS5.6AI score0.00456EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder