CVE-2014-2065

Опубликовано: 17 окт. 2014

Источник: debian

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
jenkins	fixed	1.565.2-1		package

Примечания

https://github.com/jenkinsci/jenkins/commit/a0b00508eeb74d7033dc4100eb382df4e8fa72e7

EPSS

Процентиль: 34%

0.00137

Низкий

Связанные уязвимости

CVE-2014-2065

ubuntu

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

CVE-2014-2065

redhat

около 12 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

CVE-2014-2065

nvd

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

GHSA-fxj8-cqcp-3vgq

github

больше 3 лет назад

Jenkins cross-site scripting (XSS) vulnerability

EPSS

Процентиль: 34%

0.00137

Низкий