CVE-2018-1000177

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in...

CVE-2018-1000177

CVE-2018-1000177 affects Jenkins S3 Plugin 0.10.12 and older. The vulnerability arises in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly where file names displayed in the UI can be controlled by an attacker, allowing JavaScript to be executed in a user’s browser durin...

CVE-2018-1000177

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in...