GHSA-7w89-qqxx-c62r

ghsaUSosv

Cross-site Scripting in Jenkins Build Failure Analyzer plugin

view advisory published 2022-05-13Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-4988US	medium6.1	1.23% (69th)	—	2017-02-09
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspeci…

references

External citations — patches, advisories, analysis.

https://jenkins.io/security/advisory/2016-06-20WEB
https://nvd.nist.gov/vuln/detail/CVE-2016-4988ADVISORY
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan