Aller au contenu
Non notée

CVE-2019-16564 Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a…

Description

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Pipeline Aggregator View Plugin 1.8 premières → 1.8 Pas de correctif indiqué
Les 2 CVE de Jenkins Pipeline Aggregator View Plugin →
Suivre cette CVE