Not rated

CVE-2019-10349 A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers…

Description

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Dependency Graph Viewer Plugin	Versions not published

Do you use Jenkins Dependency Graph Viewer Plugin?

Track this CVE Watch Jenkins Dependency Graph Viewer Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10349

Timeline

Published July 11, 2019
Last modified August 4, 2024

References

[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins www.openwall.com
packetstormsecurity.com packetstormsecurity.com
109156 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE