Kurz gesagt
- CVE-2019-16564 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in com.paul8620.jenkins.plugins:pipeline-aggregator-view, pipeline aggregator view (jenkins).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.69%, höher als bei 52.8% aller Schwachstellen.
- Abhilfe: auf 1.9 oder neuer aktualisieren.
Description
Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.
NVD description
Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.
Weitere Schwachstellen in com.paul8620.jenkins.plugins:pipeline-aggregator-view
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free