Описание
Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 2 | jenkins | Not affected | ||
| Red Hat OpenShift Enterprise 3 | jenkins | Not affected |
Показывать по
Дополнительная информация
Статус:
6.4 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.
Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.
Cross-site scripting (XSS) vulnerability in the Extra Columns plugin b ...
Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)
6.4 Medium
CVSS2