CVE-2019-10395

CVE-2019-10395 affects the Jenkins Build Environment Plugin (versions ≤ 1.6) and relates to a cross-site scripting (XSS) vulnerability caused by not escaping values of environment variables shown in plugin views. The issue could be exploited by users who can modify various job/build properties. P...