~ / search / GHSA-3rrg-p8xc-3457

GHSA-3rrg-p8xc-3457

Stored cross-site scripting vulnerability in Jenkins TestLink Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-1000113

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:testlink < 2.13 2.13

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript

References

External links from the advisory. They lead to third-party sites.