Описание
Reflected Cross-site Scripting in Jenkins Nested View Plugin
Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.
Nested View Plugin 1.26 escapes search parameters
Пакеты
Наименование
org.jenkins-ci.plugins:nested-view
maven
Затронутые версииВерсия исправления
>= 1.20, < 1.26
1.26
Связанные уязвимости
CVSS3: 6.1
nvd
больше 3 лет назад
Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.