Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7536)

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

Remediation

References

CVE-2015-7536

Related Vulnerabilities

WordPress Plugin Editorial Calendar Multiple Vulnerabilities (2.6)

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102)

Oracle Database Server CVE-2008-1817 Vulnerability (CVE-2008-1817)

WordPress Plugin podPress Cross-Site Scripting (8.8.10.13)

WordPress Plugin Malware Finder Cross-Site Scripting (1.1)

Severity

Medium

Classification

CVE-2015-7536 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N