Jenkins Advisory 2017-11-08: CVE-2017-1000392: Persisted XSS vulnerability in autocompletion suggestions
|4||(AV:N/AC:M/Au:S/C:N/I:P/A:N)||November 19, 2017||November 19, 2017||February 11, 2018|
Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.
Free Nexpose Download
Discover, prioritize, and remediate security risks today!