Lucene search
PRIOn knowledge basePRION:CVE-2018-1000426HistoryJan 09, 2019 - 11:29 p.m.
Cross site scripting
2019-01-0923:29:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
32.3%
A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangelogLeftsideBuildDecorator/badge.jelly, GitLogJiraFilterPostPublisher/config.jelly, GitLogBasicChangelogPostPublisher/config.jelly that allows attackers able to control the Git history parsed by the plugin to have Jenkins render arbitrary HTML on some pages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git_changelog | le | 2.6 |
Related
cvelist
cvelist
CVE-2018-1000426
2019-01-09 23:00:00
osv
osv
Stored XSS vulnerability in Jenkins Git Changelog Plugin
2022-05-13 01:30:26
CVE-2018-1000426
2019-01-09 23:29:02
nvd
nvd
CVE-2018-1000426
2019-01-09 23:29:02
cve
cve
CVE-2018-1000426
2019-01-09 23:29:02
github
github
Stored XSS vulnerability in Jenkins Git Changelog Plugin
2022-05-13 01:30:26