Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:03 p.m.•28 views

Jenkins Pipeline Aggregator View Plugin stored XSS vulnerability

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...

5.4CVSS5.8AI score0.00688EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2019/12/17 3:15 p.m.•30 views

CVE-2019-16564

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...

5.4CVSS5.3AI score0.00688EPSS
SaveExploits0References2
Mend
Mend
•added 2019/12/17 2:40 p.m.•5 views

CVE-2019-16564

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...

5.4CVSS0.00688EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/17 12:00 a.m.•6 views

CVE-2019-16564: Improper Neutralization of Input During Web Page Generation

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...

5.4CVSS6AI score0.00688EPSS
SaveExploits0References2
Rows per page
Query Builder