Описание
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
EPSS
3.5 Low
CVSS2
Дефекты
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.ja ...
EPSS
3.5 Low
CVSS2