Описание
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jenkins | removed | package |
EPSS
Процентиль: 100%
0.82733
Высокий
Связанные уязвимости
CVSS3: 5.4
redhat
около 6 лет назад
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
CVSS3: 5.4
nvd
около 6 лет назад
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
CVSS3: 8
github
больше 4 лет назад
Jenkins Cross-site Scripting vulnerability in project naming strategy
EPSS
Процентиль: 100%
0.82733
Высокий