CVE-2018-1000202

N/A

Description

A persisted cross-site scripting vulnerability exists in Jenkins Groovy Postbuild Plugin 2.3.1 and older in various Jelly files that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.

Details CVE

Score CVSS v3.1N/A

Publie6/5/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

jenkins:groovy_postbuild

Faiblesses (CWE)

CWE-79

References

https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821(cve@mitre.org)

https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.