Description

Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://secunia.com/advisories/59122

https://wiki.jenkins-ci.org/display/JENKINS/Monitoring

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Related Vulnerabilities

CVE-2014-3743 Vulnerability in npm package marked

CVE-2016-6812 Vulnerability in maven package org.apache.cxf:cxf-rt-transports-http

CVE-2013-7250 Vulnerability in maven package org.projectforge:projectforge-webapp

CVE-2020-24706 Vulnerability in maven package org.wso2.carbon:org.wso2.carbon.ui

CVE-2020-7747 Vulnerability in npm package lightning-server

Severity

Critical

Classification

CWE-79