Non notée

CVE-2019-10396 Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting…

Description

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Dashboard View Plugin	Versions non publiées

Les 3 CVE de Jenkins Dashboard View Plugin →

CVE-2022-27197 Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source… Non notée CVE-2021-21649 Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in… Non notée

Vous utilisez Jenkins Dashboard View Plugin ?

Suivre cette CVE Surveiller Jenkins Dashboard View Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2019-10396

Chronologie

Publiée 12 septembre 2019
Dernière modification 4 août 2024

Références

[oss-security] 20190912 Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Suivre cette CVE

CVE-2019-10396 Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting…

Description

Produits et versions touchés

Autres CVE de Jenkins Dashboard View Plugin