Security Advisory

CVE-2018-1999005

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-23 19:00:00

Last updated 2024-08-05 12:47:57

Assigner mitre

State PUBLISHED

Description

A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in BuildTimelineWidget.java, BuildTimelineWidget/control.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another users browser when that other user performs some UI actions.

← Browse all CVEs View on cve.org ↗