Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/03/25 12:00 a.m.•30 views

Stored XSS vulnerability in rapiddeploy-jenkins

rapiddeploy-jenkins 4.2 and earlier does not escape package names in its displayed table of packages obtained from a remote server. This results in a stored cross-site scripting XSS vulnerability exploitable by users able to configure jobs. rapiddeploy-jenkins 4.2.1 escapes package names...

5.4CVSS5.4AI score0.00735EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder