Non notée
CVE-2019-16563 Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view,…
Description
Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Mission Control Plugin 0.9 | premières → 0.9.16 | Pas de correctif indiqué |