Vulnerability & Exploit Database

Back to search

Jenkins Advisory 2017-11-08: CVE-2017-1000392: Persisted XSS vulnerability in autocompletion suggestions

Severity CVSS Published Added Modified
4 (AV:N/AC:M/Au:S/C:N/I:P/A:N) November 20, 2017 November 20, 2017 February 12, 2018

Description

Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.

Scan For This Vulnerability

Use our top-rated tool to discover, prioritize, and remediate your vulnerabilities

 Free InsightVM Trial

References

Solution

jenkins-lts-upgrade-2_73_3

Related Vulnerabilities