The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 11 11 | — | Upgrade Jenkins to version 1.638Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.625.2Upgrade Jenkins LTS to the latest version | Nov 13, 2017 | Nov 25, 2015 |
| Redhat Openshift | — | Upgrade nodejs-expand-rangeUpgrade openshift-origin-node-utilUpgrade openshift-origin-broker-utilUpgrade nodejs-es6-promiseUpgrade nodejs-regex-cacheUpgrade nodejs-pinkieUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-os-tmpdirUpgrade phpUpgrade nodejs-latest-versionUpgrade nodejs-gotUpgrade nodejs-os-homedirUpgrade nodejs-binary-extensionsUpgrade origin-kibanaUpgrade nodejs-configstoreUpgrade nodejs-is-globUpgrade nodejs-arr-flattenUpgrade nodejs-fromUpgrade openshift-origin-msg-node-mcollectiveUpgrade nodejs-lodash.bindcallbackUpgrade rubygem-openshift-origin-commonUpgrade nodejs-array-uniqueUpgrade nodejs-undefsafeUpgrade nodejs-pause-streamUpgrade nodejs-url-parse-laxUpgrade nodejs-preserveUpgrade nodejs-osenvUpgrade nodejs-duplexifyUpgrade nodejs-async-eachUpgrade nodejs-glob-parentUpgrade rubygem-openshift-origin-controllerUpgrade nodejs-create-error-classUpgrade nodejs-anymatchUpgrade nodejs-strip-json-commentsUpgrade nodejs-map-streamUpgrade nodejs-stream-combinerUpgrade nodejs-registry-urlUpgrade nodejs-arr-diffUpgrade nodejs-is-primitiveUpgrade openshift-enterprise-upgradeUpgrade openshift-origin-cartridge-cronUpgrade nodejs-lodash.isargumentsUpgrade nodejs-optimistUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-lowercase-keysUpgrade nodejs-ps-treeUpgrade nodejs-node-status-codesUpgrade nodejs-ansi-greenUpgrade nodejs-mkdirpUpgrade nodejs-lazy-cacheUpgrade jenkinsUpgrade openvswitchUpgrade nodejs-kind-ofUpgrade nodejs-expand-bracketsUpgrade nodejs-lodash.assignUpgrade nodejs-object.omitUpgrade nodejs-is-numberUpgrade nodejs-is-redirectUpgrade nodejs-is-streamUpgrade nodejs-capture-stack-traceUpgrade nodejs-repeat-elementUpgrade nodejs-is-dotfileUpgrade nodejs-throughUpgrade nodejs-write-file-atomicUpgrade nodejs-isobjectUpgrade nodejs-xdg-basedirUpgrade nodejs-align-textUpgrade nodejs-error-exUpgrade nodejs-rcUpgrade nodejs-extglobUpgrade atomic-openshiftUpgrade nodejs-semverUpgrade nodejs-lodash.createassignerUpgrade nodejs-glob-baseUpgrade openshift-ansibleUpgrade nodejs-randomaticUpgrade nodejs-lodash.restparamUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-is-binary-pathUpgrade nodejs-lodash.defaultsUpgrade nodejs-graceful-fsUpgrade nodejs-splitUpgrade openshift-origin-cartridge-mysqlUpgrade nodejs-lodash.getnativeUpgrade nodejs-event-streamUpgrade activemqUpgrade nodejs-is-extglobUpgrade nodejs-deep-extendUpgrade nodejs-iniUpgrade nodejs-lodash.isarrayUpgrade nodejs-string-lengthUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-update-notifierUpgrade nodejs-pinkie-promiseUpgrade nodejs-slideUpgrade nodejs-prepend-httpUpgrade nodejs-normalize-pathUpgrade nodejs-object-assignUpgrade nodejs-unzip-responseUpgrade nodejs-bracesUpgrade nodejs-uuidUpgrade nodejs-end-of-streamUpgrade nodejs-parse-globUpgrade nodejs-is-equal-shallowUpgrade nodejs-for-ownUpgrade nodejs-micromatchUpgrade nodejs-ansi-wrapUpgrade nodejs-filename-regexUpgrade openshift-origin-node-proxyUpgrade nodejs-is-plain-objUpgrade nodejs-readdirpUpgrade nodejs-read-all-streamUpgrade nodejs-for-inUpgrade nodejs-duplexerUpgrade nodejs-is-extendableUpgrade nodejs-chokidarUpgrade nodejs-nodemonUpgrade nodejs-arrifyUpgrade nodejs-lodash.baseassignUpgrade nodejs-success-symbolUpgrade nodejs-lodash.basecopyUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-timed-outUpgrade nodejs-package-jsonUpgrade nodejs-semver-diffUpgrade rhcUpgrade nss_wrapperUpgrade heapsterUpgrade nodejs-fill-rangeUpgrade nodejs-touchUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-lodash.keysUpgrade nodejs-parse-jsonUpgrade openshift-origin-cartridge-phpUpgrade nodejs-is-npm | Jun 18, 2018 | Nov 11, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub