25 matches found
CVE-2018-1000415
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly,...
CVE-2018-1000415
CVE-2018-1000415 describes a cross-site scripting vulnerability in the Jenkins Rebuilder Plugin (versions ≤ 1.28) affecting multiple RebuildAction jelly parameter files. The flaw allows users with Job/Configuration permission to inject arbitrary HTML into rebuild forms, enabling partial confident...
CVE-2014-3882
Cross-site request forgery CSRF vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users...