Not rated

CVE-2019-1003042 A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to…

Description

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Lockable Resources Plugin	Versions not published

The 2 CVEs of Jenkins Lockable Resources Plugin →

CVE-2020-2281 A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows… Not rated

Do you use Jenkins Lockable Resources Plugin?

Track this CVE Watch Jenkins Lockable Resources Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003042

Timeline

Published March 28, 2019
Last modified August 5, 2024

References

[oss-security] 20190328 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
107628 www.securityfocus.com
RHSA-2019:1423 access.redhat.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-1003042 A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to…

Description

Affected products and versions

Other CVEs of Jenkins Lockable Resources Plugin