Jenkins Advisory 2017-11-08: CVE-2017-1000392: Persisted XSS vulnerability in autocompletion suggestions
|4||(AV:N/AC:M/Au:S/C:N/I:P/A:N)||November 20, 2017||November 20, 2017||February 12, 2018|
Jenkins 2.88 and earlier; 2.73.2 and earlier Autocompletion suggestions for text fields were not escaped, resulting in a persisted cross-site scripting vulnerability if the source for the suggestions allowed specifying text that includes HTML metacharacters like less-than and greater-than characters.
Scan For This Vulnerability
Use our top-rated tool to discover, prioritize, and remediate your vulnerabilities