Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/09/25 12:00 a.m.•17 views

Stored XSS vulnerability in log-parser

log-parser did not escape an error message shown when log parsing patterns are invalid. This resulted in a persisted cross-site scripting vulnerability exploitable by attackers able to control the log parsing rules configuration, typically users with Job/Configure permission. Jenkins applies the...

5.4CVSS5.4AI score0.00882EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder