CVE-2019-10373

Summary: CVE-2019-10373 is a stored cross-site scripting vulnerability in the Jenkins Build Pipeline Plugin (versions 1.5.8 and earlier). Root cause: the plugin does not properly escape variables in views, enabling an attacker who can edit the build pipeline description to inject arbitrary HTML a...