Description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.

Remediation

References

CVE-2012-4439

Related Vulnerabilities

WordPress 2.0.6 'Zend_Hash_Del_Key_Or_Index' SQL Injection Vulnerability (0.6.2 - 2.0.6)

ownCloud Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2015-4718)

WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)

ATutor Improper Privilege Management Vulnerability (CVE-2017-1000003)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-1476)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-4439