Jenkins Violation Plugin allows Cross-Site Scripting (XSS)

MEDIO 6.1CVE-2012-4440 · GHSA-5qpv-27q3-6484 · Published 18/11/2019 · updated 16/06/2026

En resumen

CVE-2012-4440 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.jenkins-ci.plugins:violations, jenkins (jenkins).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.3% de las vulnerabilidades.
Solución: actualizar a 0.7.11, 1.466.2, 1.482 o posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:violations Maven	`< 0.7.11`	`0.7.11`
jenkins jenkins	`< 1.466.2< 1.482`	`1.466.21.482`

Description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

NVD description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

References

nvd.nist.gov/vuln/detail/CVE-2012-4440 · ADVISORY
jenkinsci/violations-plugin commit 6dcbef2 · WEB
jenkinsci/violations-plugin · PACKAGE
security-tracker.debian.org/tracker/CVE-2012-4440 · WEB
cloudbees.com/jenkins-security-advisory-2012-09-17 · WEB
openwall.com/lists/oss-security/2012/09/21/2 · WEB

Más vulnerabilidades de org.jenkins-ci.plugins:violations

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:violations

Maven

< 0.7.11

0.7.11

jenkins

< 1.466.2< 1.482

1.466.21.482

Description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

NVD description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.