Lucene search
Veracode Vulnerability DatabaseVERACODE:5757HistoryJan 29, 2018 - 12:31 a.m.
Cross-site Scripting (XSS)
2018-01-2900:31:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
34.2%
global-build-stats is vulnerable to reflected cross-site scripting (XSS) attacks. These attacks are possible because some URLs return JSON as Content Type: text/html. This content may be interpreted by clients as HTML allowing XSS to be performed. Cross-site request forgery (CSRF) attacks are also possible because some URLs don’t require POST requests to modify data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hudson global-build-stats plugin | le | 1.0 |
Related
osv
osv
CVE-2017-1000389
2018-01-26 02:29:00
cve
cve
CVE-2017-1000389
2018-01-26 02:29:00
nvd
nvd
CVE-2017-1000389
2018-01-26 02:29:00
github
github
prion
prion
Cross site request forgery (csrf)
2018-01-26 02:29:00
cvelist
cvelist
CVE-2017-1000389
2018-01-26 02:00:00