Description

Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

https://wiki.jenkins-ci.org/display/JENKINS/Monitoring

http://secunia.com/advisories/59122

Related Vulnerabilities

CVE-2018-14041 Vulnerability in maven package org.webjars:bootstrap

CVE-2016-5398 Vulnerability in maven package org.jbpm:jbpm-designer-client

CVE-2020-13928 Vulnerability in maven package org.apache.atlas:apache-atlas

CVE-2017-1000392 Vulnerability in maven package org.jenkins-ci.main:jenkins-war

CVE-2022-0748 Vulnerability in npm package post-loader

Severity

Critical

Classification

CWE-79