Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 4:04 a.m.33 views

Cross-site Scripting in Jenkins Core

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

4.7CVSS4.5AI score0.01315EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2017/12/11 4:49 p.m.29 views

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

4.8CVSS4.5AI score0.01315EPSS
SaveExploits0References2
NVD
NVD
added 2017/12/06 5:29 a.m.34 views

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

4.7CVSS4.2AI score0.01315EPSS
SaveExploits0References3
Prion
Prion
added 2017/12/06 5:29 a.m.19 views

Design/Logic Flaw

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

3.5CVSS4.2AI score0.01315EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/12/06 5:29 a.m.24 views

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

4.7CVSS5.5AI score
SaveExploits0References3
Cvelist
Cvelist
added 2017/12/06 5:00 a.m.42 views

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

4.2AI score0.01315EPSS
SaveExploits0References3
Rows per page
Query Builder