Описание
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | DNE | |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | ignored | end of life |
| saucy | ignored | end of life |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needed |
Показывать по
10
EPSS
Процентиль: 34%
0.00137
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
redhat
около 12 лет назад
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
nvd
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
debian
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and L ...
EPSS
Процентиль: 34%
0.00137
Низкий
4.3 Medium
CVSS2