Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)

MEDIO 6.1CVE-2012-4441 · GHSA-3qxr-q72q-hmwp · Published 18/11/2019 · updated 16/06/2026

En resumen

CVE-2012-4441 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.jenkins-ci.plugins:ci-game, jenkins (jenkins).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.3% de las vulnerabilidades.
Solución: actualizar a 1.19, 1.466.2, 1.482 o posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:ci-game Maven	`< 1.19`	`1.19`
jenkins jenkins	`< 1.466.2< 1.482`	`1.466.21.482`

Description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.

NVD description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.

References

nvd.nist.gov/vuln/detail/CVE-2012-4441 · ADVISORY
jenkinsci/ci-game-plugin commit 9ef03da · WEB
jenkinsci/ci-game-plugin · PACKAGE
security-tracker.debian.org/tracker/CVE-2012-4441 · WEB
cloudbees.com/jenkins-security-advisory-2012-09-17 · WEB
openwall.com/lists/oss-security/2012/09/21/2 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free