GHSA-q87g-7mp5-765q
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:script-security | < 1.73 | 1.73 |
Details
As written in the advisory (Markdown source, shown as plain text).
Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.
References
External links from the advisory. They lead to third-party sites.