| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.74, < 2.89< 2.73.3 | 2.892.73.3 |
| jenkins | ≤ 2.73.2≤ 2.88 |
Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free