Description

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.

Remediation

References

CVE-2015-5321

Related Vulnerabilities

WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.9.10)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2021-38268)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2057)

MySQL CVE-2021-35625 Vulnerability (CVE-2021-35625)

WordPress Plugin Restaurant Menu by MotoPress Cross-Site Scripting (2.4.1)

Severity

Medium

Classification

CVE-2015-5321 CWE-200

Tags

Missing Update Known Vulnerabilities