Description
Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.
Remediation
References
Related Vulnerabilities
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)
Oracle Database Server CVE-2024-21251 Vulnerability (CVE-2024-21251)
WordPress Plugin wSecure Lite Remote Code Execution (2.3)
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153)