CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by…

published December 6, 2017

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01152 · 66.7th percentile
Published
2017-12-06T05:00Z
EPSS history
Timeline
  • 06 DEC 05:00Z
    Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by…
    cvelistv5