Cross-site Scripting (XSS)

2020-10-0103:52:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

76.6%

JSON

jenkins is vulnerable to cross-site scripting (XSS). The vulnerability exists through the project naming strategy.

CPENameOperatorVersion
jenkinseq2.176.4.1574865864__1.el7
jenkinseq2.32.2__1.el7
jenkinseq2.19.3__1.el7
jenkinseq2.89.2.1516390120__1.el7
jenkinseq1.625.3__2.el7aos
jenkinseq2.222.1.1591353286__1.el7
jenkinseq2.204.1.1578489705__1.el7
jenkinseq1.642.2__1.el7
jenkinseq2.235.2.1597312414__1.el7
jenkinseq2.176.3.1568230904__1.el7

Name	Operator	Version
jenkins	eq	2.176.4.1574865864__1.el7
jenkins	eq	2.32.2__1.el7
jenkins	eq	2.19.3__1.el7
jenkins	eq	2.89.2.1516390120__1.el7
jenkins	eq	1.625.3__2.el7aos
jenkins	eq	2.222.1.1591353286__1.el7
jenkins	eq	2.204.1.1578489705__1.el7
jenkins	eq	1.642.2__1.el7
jenkins	eq	2.235.2.1597312414__1.el7
jenkins	eq	2.176.3.1568230904__1.el7