CVE-2017-1000102

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to…

published October 4, 2017

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00743 · 53.9th percentile
Published
2017-10-04T01:00Z
EPSS history
Timeline
  • 04 OCT 01:00Z
    The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to…
    cvelistv5