Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

https://access.redhat.com/errata/RHSA-2016:0070

https://bugzilla.redhat.com/show_bug.cgi?id=1147766

https://exchange.xforce.ibmcloud.com/vulnerabilities/96975

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Related Vulnerabilities

CVE-2021-21160 Vulnerability in npm package electron

CVE-2017-16077 Vulnerability in npm package mongose

CVE-2017-16088 Vulnerability in npm package safe-eval

CVE-2016-10557 Vulnerability in npm package appium-chromedriver

CVE-2018-8010 Vulnerability in maven package org.apache.solr:solr-core

Severity

Critical

Classification

CWE-79

Tags

Third Party Advisory Issue Tracking VDB Entry Vendor Advisory