Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36767
HistoryAug 20, 2022 - 9:46 a.m.

Cross-site Scripting (XSS)

2022-08-2009:46:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
jenkins
xss vulnerability
svg icons
html output

0.001 Low

EPSS

Percentile

22.0%

jenkins is vulnerable to cross-site scripting(XSS) attacks. The HTML output generated for new symbol-based SVG icons includes the title attribute of l:ionicon and alt attribute of l:icon without further escaping, resulting in a cross-site scripting (XSS) vulnerability.