~ / search / GHSA-9523-474x-5h36

GHSA-9523-474x-5h36

Cross site scripting in Jenkins Mission Control Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-16563

Packages

EcosystemPackageAffectedFixed in
Maven tech.andrey.jenkins:mission-control-view <= 0.9.16 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties.

References

External links from the advisory. They lead to third-party sites.