| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.177, < 2.192< 2.176.3 | 2.1922.176.3 |
| jenkins | ≤ 2.176.2≤ 2.191 | |
| communications cloud native core automated test suite | = 1.9.0 | |
| openshift container platform | = 3.11= 4.1 |
A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free