Not rated

CVE-2019-10395 Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a…

Description

Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Build Environment Plugin	Versions not published

Do you use Jenkins Build Environment Plugin?

Track this CVE Watch Jenkins Build Environment Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10395

Timeline

Published September 12, 2019
Last modified August 4, 2024

References

[oss-security] 20190912 Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE