Description
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
Remediation
References
https://jenkins.io/security/advisory/2016-06-20/
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20
Related Vulnerabilities
CVE-2022-36910 Vulnerability in maven package org.jenkins-ci.plugins:lucene-search
CVE-2019-10362 Vulnerability in maven package io.jenkins:configuration-as-code
CVE-2018-10054 Vulnerability in maven package com.h2database:h2
CVE-2016-4432 Vulnerability in maven package org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol
CVE-2020-2181 Vulnerability in maven package org.jenkins-ci.plugins:credentials-binding