Описание
Reflected XSS vulnerability in Jenkins VncRecorder Plugin
VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output.
This results in a reflected cross-site scripting (XSS) vulnerability.
VncRecorder Plugin 1.35 escapes the parameter value in the output.
Пакеты
Наименование
org.jenkins-ci.plugins:vncrecorder
maven
Затронутые версииВерсия исправления
<= 1.25
1.35
Связанные уязвимости
CVSS3: 6.1
nvd
больше 5 лет назад
Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.