Not rated
CVE-2019-16562 Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in…
Description
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins buildgraph-view Plugin 1.8 | earliest → 1.8 | No fix stated |
| Jenkins buildgraph-view Plugin 1.5 | 1.5.2 → latest | No fix stated |