Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

Remediation

References

CVE-2015-1812

Related Vulnerabilities

IBMHttpServer CVE-2012-5955 Vulnerability (CVE-2012-5955)

Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3722)

WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.1)

XWiki Incorrect Authorization Vulnerability (CVE-2023-26056)

WordPress Plugin Admin Columns Pro Cross-Site Scripting (5.5.1)

Severity

Medium

Classification

CVE-2015-1812 CWE-707

Tags

Missing Update Known Vulnerabilities