Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr4j-7jjv-24m7

Опубликовано: 13 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.4

Описание

Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

Пакеты

Наименование

org.jenkins-ci.plugins:extra-columns

maven
Затронутые версииВерсия исправления

< 1.17

1.17

EPSS

Процентиль: 39%
0.00178
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

redhat
почти 10 лет назад

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

CVSS3: 5.4
nvd
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

CVSS3: 5.4
debian
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the Extra Columns plugin b ...

EPSS

Процентиль: 39%
0.00178
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79