Description

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Remediation

References

https://jenkins.io/security/advisory/2016-06-20/

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20

Related Vulnerabilities

CVE-2021-36161 Vulnerability in maven package org.apache.dubbo:dubbo-common

CVE-2018-1000012 Vulnerability in maven package org.jvnet.hudson.plugins:warnings

CVE-2020-2226 Vulnerability in maven package org.jenkins-ci.plugins:matrix-project

CVE-2023-29510 Vulnerability in maven package org.xwiki.platform:xwiki-platform-localization-source-wiki

CVE-2016-10549 Vulnerability in npm package sails

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Vendor Advisory