En resumen
- CVE-2018-1000415 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a com.sonyericsson.hudson.plugins.rebuild:rebuild, rebuild (rebuild project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.62%, mayor que el 49.9% de las vulnerabilidades.
- Solución: actualizar a 1.29 o posterior.
Description
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in
RebuildAction/BooleanParameterValue.jelly,
RebuildAction/ExtendedChoiceParameterValue.jelly,
RebuildAction/FileParameterValue.jelly,
RebuildAction/LabelParameterValue.jelly,
RebuildAction/ListSubversionTagsParameterValue.jelly,
RebuildAction/MavenMetadataParameterValue.jelly,
RebuildAction/NodeParameterValue.jelly,
RebuildAction/PasswordParameterValue.jelly,
RebuildAction/RandomStringParameterValue.jelly,
RebuildAction/RunParameterValue.jelly,
RebuildAction/StringParameterValue.jelly,
RebuildAction/TextParameterValue.jelly,
RebuildAction/ValidatingStringParameterValue.jelly
that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.
NVD description
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.
Más vulnerabilidades de com.sonyericsson.hudson.plugins.rebuild:rebuild
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free