Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/09/25 12:00 a.m.•21 views

Stored XSS vulnerability in queue item tooltip

Jenkins did not escape the reason a queue item is blocked in tooltips. This resulted in a cross-site scripting vulnerability exploitable by attackers able to control the reason a queue item is blocked, for example a label expression that does not match idle executors. Jenkins now escapes the reas...

5.4CVSS5.3AI score0.01033EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder