Not rated
CVE-2019-16563 Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view,…
Description
Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Mission Control Plugin 0.9 | earliest → 0.9.16 | No fix stated |