A persisted cross-site scripting vulnerability exists in Jenkins Groovy Postbuild Plugin 2.3.1 and older in various Jelly files that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
References
Link | Resource |
---|---|
https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:21:59
Updated: 2022-10-03T16:21:59
Reserved: 2018-05-09T00:00:00
Link: CVE-2018-1000202
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-06-05T21:29:00.807
Modified: 2018-07-18T19:51:25.737
Link: CVE-2018-1000202
JSON object: View
Redhat Information
No data.
CWE