| Package | Affected versions | Patched versions |
|---|---|---|
| io.jenkins.plugins:custom-build-properties | < 2.82.v16d5b | 2.82.v16d5b |
| custom build properties | ≤ 2.79.vc095ccc85094 |
Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values. Custom Build Properties Plugin 2.82.v16d5b_d3590c7 escapes property values and build display names on the Custom Build Properties and Build Summary pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free