Jenkins vulnerable to Cross-site Scripting
Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-2033US | low2.1 | — | ||
Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authentica… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cbWEB
- https://access.redhat.com/errata/RHEA-2013:1032WEB
- https://access.redhat.com/security/cve/CVE-2013-2033WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=958957WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84004WEB
- https://issues.jenkins-ci.org/browse/SECURITY-67WEB
- https://nvd.nist.gov/vuln/detail/CVE-2013-2033ADVISORY
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan