~ / search / GHSA-9c2p-99pg-c4j9

GHSA-9c2p-99pg-c4j9

Persistent XSS vulnerability in Static Analysis Utilities

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-1000102

Packages

EcosystemPackageAffectedFixed in
Maven org.jvnet.hudson.plugins:analysis-core < 1.92 1.92

Details

As written in the advisory (Markdown source, shown as plain text).

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.

References

External links from the advisory. They lead to third-party sites.