En resumen
- CVE-2019-1003042 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a org.6wind.jenkins:lockable-resources, lockable resources (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 71.9% de las vulnerabilidades.
- Solución: actualizar a 2.5 o posterior.
Description
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
NVD description
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
Más vulnerabilidades de org.6wind.jenkins:lockable-resources
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free