En bref
- CVE-2018-1000108 est une vulnérabilité MOYENNE (CVSS 6.1) touchant org.jenkins-ci.plugins:cppncss, cppncss (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.83%, plus élevée que 57.7% des vulnérabilités.
- Correctif : mettre à jour vers 1.2 ou plus récent.
Description
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.
NVD description
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free