maps.hudson.plugins:xfpanel (>=1.0.2, <=1.0.3), org.jvnet.hudson.main:hudson-test-harness (1.326) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.326)

org.jvnet.hudson.main:hudson-core MAVEN version 1.326 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - maps.hudson.plugins:xfpanel =1.0.2, =1.0, =1.1.2, =1.0.4, =1.0.9 Source cves: CVE-2015-8031...

Stored XSS vulnerability in xfpanel

xfpanel 2.0.1 and earlier does not escape the job names used in tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix. Learn why we announce this...