Beveiligingsadvies

CVE-2017-2601

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-05-10 00:00:00

Laatst bijgewerkt 2024-08-05 14:02:06

Toegewezen door redhat

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions.

← Alle CVE's bekijken Bekijk op cve.org ↗