Beveiligingsadvies

CVE-2018-1000177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-05-08 15:00:00

Laatst bijgewerkt 2024-09-17 04:20:43

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user's browser when that user performs some UI actions.

← Alle CVE's bekijken Bekijk op cve.org ↗