Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812.

Remediation

References

CVE-2015-1813

Related Vulnerabilities

Envoy Proxy CVE-2023-27487 Vulnerability (CVE-2023-27487)

MySQL CVE-2016-0640 Vulnerability (CVE-2016-0640)

Magento CVE-2019-8133 Vulnerability (CVE-2019-8133)

Mailman Other Vulnerability (CVE-2003-0965)

Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47444)

Severity

Medium

Classification

CVE-2015-1813 CWE-707

Tags

Missing Update Known Vulnerabilities