Kurz gesagt
- CVE-2018-1000415 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in com.sonyericsson.hudson.plugins.rebuild:rebuild, rebuild (rebuild project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.62%, höher als bei 49.9% aller Schwachstellen.
- Abhilfe: auf 1.29 oder neuer aktualisieren.
Description
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in
RebuildAction/BooleanParameterValue.jelly,
RebuildAction/ExtendedChoiceParameterValue.jelly,
RebuildAction/FileParameterValue.jelly,
RebuildAction/LabelParameterValue.jelly,
RebuildAction/ListSubversionTagsParameterValue.jelly,
RebuildAction/MavenMetadataParameterValue.jelly,
RebuildAction/NodeParameterValue.jelly,
RebuildAction/PasswordParameterValue.jelly,
RebuildAction/RandomStringParameterValue.jelly,
RebuildAction/RunParameterValue.jelly,
RebuildAction/StringParameterValue.jelly,
RebuildAction/TextParameterValue.jelly,
RebuildAction/ValidatingStringParameterValue.jelly
that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.
NVD description
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.
Weitere Schwachstellen in com.sonyericsson.hudson.plugins.rebuild:rebuild
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free