Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-7536

Опубликовано: 09 дек. 2015
Источник: redhat
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Enterprise 2jenkinsAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1291794jenkins: stored XSS vulnerability through workspace files and archived artifacts (SECURITY-95)

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 10 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

CVSS3: 5.4
nvd
больше 10 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

CVSS3: 5.4
debian
больше 10 лет назад

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and L ...

CVSS3: 5.4
github
больше 4 лет назад

Improper Neutralization of Input During Web Page Generation in Jenkins

4.3 Medium

CVSS2