Описание
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.
Пакеты
Наименование
org.jenkins-ci.tools:git-parameter
maven
Затронутые версииВерсия исправления
<= 0.9.11
0.9.12
Связанные уязвимости
CVSS3: 5.4
nvd
почти 6 лет назад
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.