Description

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://osvdb.org/100106

http://secunia.com/advisories/55783

https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20

Related Vulnerabilities

CVE-2022-40635 Vulnerability in maven package org.craftercms:craftercms

CVE-2023-35146 Vulnerability in maven package org.jenkins.plugin.templateworkflows:template-workflows

CVE-2023-24425 Vulnerability in maven package com.cloudbees.jenkins.plugins:kubernetes-credentials-provider

CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on

CVE-2011-2204 Vulnerability in maven package tomcat:catalina

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory