Description

Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."

Remediation

References

CVE-2014-2067

Related Vulnerabilities

Apache 2.x version older than 2.0.45

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Privilege Escalation (2.0.50)

WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.1)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43726)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.26)

Severity

Low

Classification

CVE-2014-2067 CWE-707

Tags

Missing Update Known Vulnerabilities