Jenkins Violation Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-4440US | medium6.1 | — | ||
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin. | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2012/09/21/2WEB
- https://github.com/jenkinsci/violations-pluginPACKAGE
- https://github.com/jenkinsci/violations-plugin/commit/6dcbef2114adb0f9c01a0a927105fcf80a414e4dWEB
- https://nvd.nist.gov/vuln/detail/CVE-2012-4440ADVISORY
- https://security-tracker.debian.org/tracker/CVE-2012-4440WEB
- https://www.cloudbees.com/jenkins-security-advisory-2012-09-17WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan